Practical tools, tested workflows and independent judgment for security leaders working under European regulatory requirements.https://cisotimes.com/en-gbhttps://cisotimes.com/security-policies-nobody-reads-are-we-just-writing-pdfs-for-auditors/https://cisotimes.com/security-policies-nobody-reads-are-we-just-writing-pdfs-for-auditors/Have you lost the count of the security policies you have written, reviewed or "inherited" over the years?Fri, 12 Dec 2025 00:00:00 GMTinformation security policypoliciesDimitris Gkoutzamanishttps://cisotimes.com/2026-national-security-predictions/https://cisotimes.com/2026-national-security-predictions/As borders become irrelevant through remotely-launched attacks, the geopolitical landscape is rapidly growing in complexity and changing how countries defineMon, 08 Dec 2025 00:00:00 GMTAnthony J. Ferrantehttps://cisotimes.com/threat-actors-see-bigger-return-for-smaller-devices-the-growing-threat-of-mobile-malware/https://cisotimes.com/threat-actors-see-bigger-return-for-smaller-devices-the-growing-threat-of-mobile-malware/Mobile devices have become indispensable to modern life, supporting both personal connectivity and professional operations. This ubiquity has made themWed, 05 Nov 2025 00:00:00 GMTMalwareMobileDavid Youssefhttps://cisotimes.com/while-youre-hunting-phish-someones-bugging-the-boardroom/https://cisotimes.com/while-youre-hunting-phish-someones-bugging-the-boardroom/There is a quiet war happening behind the noise of cybersecurity. Firewalls are roaring, alerts are pinging, dashboards are glowing red, and somewhere in theMon, 20 Oct 2025 00:00:00 GMTespionagePhysical SecurityActive Counter Measureshttps://cisotimes.com/insider-threat-from-detection-to-prevention/https://cisotimes.com/insider-threat-from-detection-to-prevention/From data leaks and cybersecurity incidents enabled by careless users to the malicious theft of intellectual property (IP) or even workplace violence, insiderWed, 23 Apr 2025 00:00:00 GMTCybersecurityInsider ThreatsJenn Christianhttps://cisotimes.com/cryptocurrency-cybersecurity-threats-how-hacks-exploits-and-scams-undermine-the-future-of-blockchain-and-defi/https://cisotimes.com/cryptocurrency-cybersecurity-threats-how-hacks-exploits-and-scams-undermine-the-future-of-blockchain-and-defi/In recent years, we've all seen cryptocurrencies grow from what felt like a niche, tech-lover experiment into a massive, complex financial system. It's beenSun, 12 Jan 2025 00:00:00 GMTCryptocurrencyVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/baymark-health-services-data-breach-ransomhub-ransomware-group-claims-responsibility-for-massive-1-5tb-data-theft/https://cisotimes.com/baymark-health-services-data-breach-ransomhub-ransomware-group-claims-responsibility-for-massive-1-5tb-data-theft/BayMark Health Services, Inc. (BayMark), the largest provider of medication-assisted treatment (MAT) for substance use disorders in North America, hasSat, 11 Jan 2025 00:00:00 GMTData BreachHealthcareDimitris Gkoutzamanishttps://cisotimes.com/best-cybersecurity-certifications-for-penetration-testing/https://cisotimes.com/best-cybersecurity-certifications-for-penetration-testing/A master list of penetration testing certifications. From beginner, to intermediate to advanced level.Sat, 11 Jan 2025 00:00:00 GMTCertificationsCybersecurityHackingLearningPenetration TestingDimitris Gkoutzamanishttps://cisotimes.com/critical-vulnerability-on-samsung-devices-could-enable-remote-exploitation/https://cisotimes.com/critical-vulnerability-on-samsung-devices-could-enable-remote-exploitation/A significant vulnerability has been uncovered in Samsung smartphones, linked to the Monkey's Audio (APE) decoder. The flaw, now resolved, was identified asSat, 11 Jan 2025 00:00:00 GMTmobile devicesSamsungVulnerabilityZero-DayDimitris Gkoutzamanishttps://cisotimes.com/darktrace-to-acquire-cado-security-strengthening-cloud-forensics-and-cybersecurity-capabilities/https://cisotimes.com/darktrace-to-acquire-cado-security-strengthening-cloud-forensics-and-cybersecurity-capabilities/Darktrace, a prominent leader in AI-driven cybersecurity solutions, has announced its intent to acquire Cado Security, a UK-based provider specializing inSat, 11 Jan 2025 00:00:00 GMTCado SecurityCloud SecurityDarktraceDimitris Gkoutzamanishttps://cisotimes.com/the-overlooked-foundations-of-cybersecurity-programs-why-small-details-determine-strategic-success/https://cisotimes.com/the-overlooked-foundations-of-cybersecurity-programs-why-small-details-determine-strategic-success/When you think about information security strategies, what comes to mind? If you're like most cybersecurity professionals, you probably envision boldMon, 06 Jan 2025 00:00:00 GMTCybersecurityStrategyDimitris Gkoutzamanishttps://cisotimes.com/the-future-of-technology-microsoft-ceo-satya-nadellas-vision-of-a-world-without-software-applications/https://cisotimes.com/the-future-of-technology-microsoft-ceo-satya-nadellas-vision-of-a-world-without-software-applications/Microsoft CEO Satya Nadella recently made waves in the tech industry with groundbreaking predictions about the future of software. His bold statements haveWed, 01 Jan 2025 00:00:00 GMTAIArtifical IntelligenceMicrosoftSatya NadellaDimitris Gkoutzamanishttps://cisotimes.com/ethical-hacking-from-misconceptions-to-modern-day-superheroes-of-cybersecurity/https://cisotimes.com/ethical-hacking-from-misconceptions-to-modern-day-superheroes-of-cybersecurity/Most people envision hacking as the dark arts of cybercrime, conjuring images of masked individuals exploiting others. However, within this stereotype lies aWed, 30 Oct 2024 00:00:00 GMTHackingLouis Martinhttps://cisotimes.com/microsoft-faces-intense-scrutiny-over-cybersecurity-practices/https://cisotimes.com/microsoft-faces-intense-scrutiny-over-cybersecurity-practices/In a pivotal hearing before the House Homeland Security Committee, Microsoft President Brad Smith faced rigorous questioning regarding the company'sSun, 16 Jun 2024 00:00:00 GMTDHSMicrosoftDimitris Gkoutzamanishttps://cisotimes.com/micro-segmentation-balancing-security-benefits-with-implementation-challenges/https://cisotimes.com/micro-segmentation-balancing-security-benefits-with-implementation-challenges/Micro-segmentation is a buzzword in the IT world, promising enhanced security and streamlined network management. It's a cutting-edge technique designed toThu, 13 Jun 2024 00:00:00 GMTCybersecurityIT SecurityMicro-SegmentationNetwork SegmentationDimitris Gkoutzamanishttps://cisotimes.com/the-rise-of-autonomous-gpt-4-bots-revolutionizing-cybersecurity-with-ai-driven-exploits/https://cisotimes.com/the-rise-of-autonomous-gpt-4-bots-revolutionizing-cybersecurity-with-ai-driven-exploits/In a demonstration of artificial intelligence capabilities, researchers have successfully infiltrated over half of their test websites using autonomous teamsMon, 10 Jun 2024 00:00:00 GMTAICVEsHackingLLMTheCISOhttps://cisotimes.com/free-microsoft-azure-courses-to-boost-your-it-skills/https://cisotimes.com/free-microsoft-azure-courses-to-boost-your-it-skills/Microsoft is providing a fantastic opportunity to expand your knowledge with a suite of free courses centered on Microsoft Azure and related technologies. ByMon, 06 May 2024 00:00:00 GMTAzureCertificationCoursesLearningMicrosoftDimitris Gkoutzamanishttps://cisotimes.com/fti-consulting-study-reveals-significant-communications-gaps-between-cisos-and-c-suites-despite-increased-focus-on-cybersecurity/https://cisotimes.com/fti-consulting-study-reveals-significant-communications-gaps-between-cisos-and-c-suites-despite-increased-focus-on-cybersecurity/FTI Consulting, Inc.'s (NYSE: FCN) Cybersecurity & Data Privacy Communications practice today released the second installment of its "CISO Redefined"Wed, 03 Apr 2024 00:00:00 GMTC-SuiteFTI ConsultingSurveyTheCISOhttps://cisotimes.com/the-worlds-most-harmful-cyber-crime-group-taken-down/https://cisotimes.com/the-worlds-most-harmful-cyber-crime-group-taken-down/The United Kingdom's National Crime Agency (NCA) unveiled that an initiative dubbed Operation Cronos has led to the acquisition of the LockBit ransomware'sTue, 20 Feb 2024 00:00:00 GMTCybercrimeLockBitNational Crime AgencyNCAOperation CronosRansomwareStealBitDimitris Gkoutzamanishttps://cisotimes.com/cisa-warns-on-known-exploited-vulnerability-roundcube/https://cisotimes.com/cisa-warns-on-known-exploited-vulnerability-roundcube/The U.S. Cybersecurity and Infrastructure Security Agency (CISA) included a well-known vulnerability in its Known Exploited Vulnerabilities (KEV) catalog,Tue, 13 Feb 2024 00:00:00 GMTCISACVE-2023-43770RoundcubeVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/the-canadian-clampdown-on-flipper-zero-a-move-against-auto-theft/https://cisotimes.com/the-canadian-clampdown-on-flipper-zero-a-move-against-auto-theft/In a decisive step aimed at curbing the escalating wave of car thefts, the Canadian government has set its sights on banning Flipper Zero, a deviceTue, 13 Feb 2024 00:00:00 GMTAuto TheftFlipper ZeroDimitris Gkoutzamanishttps://cisotimes.com/hpe-hacked-by-russian-group-following-microsoft-email-breach/https://cisotimes.com/hpe-hacked-by-russian-group-following-microsoft-email-breach/Hewlett Packard Enterprise (HPE), a titan in the realm of enterprise technology, encountered a formidable cyber threat when its cloud-based email service fellFri, 26 Jan 2024 00:00:00 GMTAPT29Cozy BearHewlett Packard EnterpriseHPEMidnight BlizzardDimitris Gkoutzamanishttps://cisotimes.com/sec-blames-sim-swapping-and-lack-of-mfa-for-x-account-hijacking/https://cisotimes.com/sec-blames-sim-swapping-and-lack-of-mfa-for-x-account-hijacking/On a seemingly regular day in early January, the U.S. Securities and Exchange Commission (SEC), a bastion of financial regulation, faced an unforeseen digitalTue, 23 Jan 2024 00:00:00 GMTSECSIM SwappingTwitterXTheCISOhttps://cisotimes.com/cisas-pre-ransomware-alerts-saved-organizations-millions-in-damages/https://cisotimes.com/cisas-pre-ransomware-alerts-saved-organizations-millions-in-damages/In recent years, ransomware attacks have become a critical threat to American organizations, causing significant disruptions across various sectors. TheseSun, 21 Jan 2024 00:00:00 GMTCERTCISAJCDCJoint Cyber Defense CollaborativeRansomwareDimitris Gkoutzamanishttps://cisotimes.com/fcc-expands-data-breach-notification-requirements/https://cisotimes.com/fcc-expands-data-breach-notification-requirements/The Federal Communications Commission (FCC) has significantly bolstered the data breach notification and reporting requirements for telecommunicationsSun, 21 Jan 2024 00:00:00 GMTData BreachFCCTheCISOhttps://cisotimes.com/microsoft-executive-emails-hacked-by-russian-intelligence-group/https://cisotimes.com/microsoft-executive-emails-hacked-by-russian-intelligence-group/Microsoft disclosed a significant breach in its email system. This incident, orchestrated by Nobelium, a Russian intelligence group, targeted the softwareSun, 21 Jan 2024 00:00:00 GMTAPT29Cozy BearMicrosoftMidnight BlizzardNobeliumDimitris Gkoutzamanishttps://cisotimes.com/top-impersonated-brands-in-phishing/https://cisotimes.com/top-impersonated-brands-in-phishing/The final quarter of 2023 has unveiled a striking trend in the realm of digital deception. The latest CheckPoint Brand Phishing Report, meticulously compiledSat, 20 Jan 2024 00:00:00 GMTAmazonAppleGoogleMicrosoftPhishingStudyDimitris Gkoutzamanishttps://cisotimes.com/fbi-and-cisa-issue-warning-on-androxgh0st-malware/https://cisotimes.com/fbi-and-cisa-issue-warning-on-androxgh0st-malware/The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued warnings about the proliferation ofFri, 19 Jan 2024 00:00:00 GMTAdvisoryAndroxGh0stAWS SecurityCISAFBILaceworkMalwareDimitris Gkoutzamanishttps://cisotimes.com/sophisticated-email-spoofing-attack-results-in-multi-million-dollar-theft-from-us-health-department/https://cisotimes.com/sophisticated-email-spoofing-attack-results-in-multi-million-dollar-theft-from-us-health-department/In a notable cybersecurity breach, hackers executed a complex spoofing attack on the US Department of Health and Human Services, defrauding the agency ofFri, 19 Jan 2024 00:00:00 GMTData BreachEmail SpoofingUS Health DepartmentDimitris Gkoutzamanishttps://cisotimes.com/over-178000-sonicwall-firewalls-vulnerable-to-exploits/https://cisotimes.com/over-178000-sonicwall-firewalls-vulnerable-to-exploits/A recent investigation by cybersecurity experts at Bishop Fox has uncovered a significant vulnerability in SonicWall's next-generation firewalls (NGFW). ThisTue, 16 Jan 2024 00:00:00 GMTBishop FoxFirewallSonicWallVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/ransomware-attacks-in-2023-a-startling-surge-and-the-ongoing-battle/https://cisotimes.com/ransomware-attacks-in-2023-a-startling-surge-and-the-ongoing-battle/Cyberint, a forerunner in threat intelligence services, disclosed a staggering 55% increase in ransomware attacks compared to the previous year. This meteoricTue, 16 Jan 2024 00:00:00 GMTALPHVClopCyberintLockBitRansomwareDimitris Gkoutzamanishttps://cisotimes.com/hacker-group-actively-exploiting-a-critical-exchange-server-vulnerability/https://cisotimes.com/hacker-group-actively-exploiting-a-critical-exchange-server-vulnerability/A significant threat has emerged from an activity group known as Forest Blizzard (STRONTIUM), originating from Russia. This group has been actively exploitingWed, 06 Dec 2023 00:00:00 GMTCVE-2023-23397DKWOCExchange ServerForest BlizzardMicrosoftMicrosoft Incident ResponsePolish Cyber CommandRussiaDimitris Gkoutzamanishttps://cisotimes.com/how-the-lockbit-ransomware-compromised-the-worlds-largest-financial-institution/https://cisotimes.com/how-the-lockbit-ransomware-compromised-the-worlds-largest-financial-institution/The recent LockBit ransomware attack on the Industrial & Commercial Bank of China (ICBC) marks a significant escalation in cyber vulnerabilities withinWed, 06 Dec 2023 00:00:00 GMTICBCLockBitRansomwareU.S. TreasuryDimitris Gkoutzamanishttps://cisotimes.com/understanding-the-escalating-threat-of-dos-attacks-insights-from-the-enisa-threat-landscape-report/https://cisotimes.com/understanding-the-escalating-threat-of-dos-attacks-insights-from-the-enisa-threat-landscape-report/In the ever-evolving world of cyber security, Denial-of-Service (DoS) attacks have emerged as a formidable threat to organizations across the globe. TheWed, 06 Dec 2023 00:00:00 GMTCybersecurityDDoSDoSENISAReportDimitris Gkoutzamanishttps://cisotimes.com/okta-security-breach-more-serious-than-initially-estimated/https://cisotimes.com/okta-security-breach-more-serious-than-initially-estimated/The recent security breach at Okta, a leading identity-management software company, has revealed more extensive damage than initially reported. ThisSat, 02 Dec 2023 00:00:00 GMTData BreachIdentity ManagementOktaSupply ChainDimitris Gkoutzamanishttps://cisotimes.com/exposed-how-romance-scams-steal-millions-in-crypto/https://cisotimes.com/exposed-how-romance-scams-steal-millions-in-crypto/In an era where digital finance and online interactions intertwine, the phenomenon of "pig butchering" scams has emerged as a sinister evolution ofSat, 25 Nov 2023 00:00:00 GMTPig ButcheringScamsUS Department of JusticeDimitris Gkoutzamanishttps://cisotimes.com/exposed-kubernetes-secrets-can-lead-to-supply-chain-attacks/https://cisotimes.com/exposed-kubernetes-secrets-can-lead-to-supply-chain-attacks/In the ever-evolving landscape of cybersecurity, a new concern has emerged that could jeopardize the safety of numerous organizations. This issue revolvesSat, 25 Nov 2023 00:00:00 GMTGithubKubernetesVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/hamas-linked-apt-group-targeting-israeli-entities/https://cisotimes.com/hamas-linked-apt-group-targeting-israeli-entities/In the ever-evolving landscape of cyber threats, a new player has emerged, signaling a significant shift in the tactics of Advanced Persistent Threat (APT)Sat, 25 Nov 2023 00:00:00 GMTHamasIsraelMalwareSysJokerDimitris Gkoutzamanishttps://cisotimes.com/australias-proactive-stance-against-state-sponsored-cyber-threats/https://cisotimes.com/australias-proactive-stance-against-state-sponsored-cyber-threats/In an era where digital security is paramount, the Australian government has taken a proactive approach to fortify its IT infrastructure againstFri, 24 Nov 2023 00:00:00 GMTASDAustraliaAustralian Signals DirectorateCybersecurityRansomwareDimitris Gkoutzamanishttps://cisotimes.com/botnet-spreads-mirai-malware-via-zero-day-vulnerabilities/https://cisotimes.com/botnet-spreads-mirai-malware-via-zero-day-vulnerabilities/In the ever-evolving landscape of cybersecurity threats, a new and active malware campaign has emerged, employing not one but two zero-day vulnerabilities.Fri, 24 Nov 2023 00:00:00 GMTAkamaiMalwareMiraiMirai-based botnetsRemote Code ExecutionZero-DayDimitris Gkoutzamanishttps://cisotimes.com/breaking-major-firms-hit-by-alarming-ransomware-blitz/https://cisotimes.com/breaking-major-firms-hit-by-alarming-ransomware-blitz/In an era where digital data is as valuable as physical assets, the specter of cyber threats looms large. Two recent incidents at Sabre Insurance and FidelityFri, 24 Nov 2023 00:00:00 GMTALPHVBlackCatFidelity National FinanceLockBitRansomwareSabre InsuranceTheCISOhttps://cisotimes.com/diamond-sleet-a-deep-dive-into-the-latest-supply-chain-cyberattack/https://cisotimes.com/diamond-sleet-a-deep-dive-into-the-latest-supply-chain-cyberattack/Microsoft Threat Intelligence has exposed a sophisticated supply chain attack. Orchestrated by the North Korea-based cyber group, Diamond Sleet (formerlyFri, 24 Nov 2023 00:00:00 GMTCyberlinkDiamond SleetNorth KoreaZINCDimitris Gkoutzamanishttps://cisotimes.com/the-rising-menace-of-scattered-spider-cyber-attacks-a-comprehensive-analysis/https://cisotimes.com/the-rising-menace-of-scattered-spider-cyber-attacks-a-comprehensive-analysis/In the ever-evolving world of cybercrime, law enforcement agencies in North America have recently raised alarms over a new and dangerous player: the ScatteredFri, 24 Nov 2023 00:00:00 GMT0ktapusOcto TempestScatter SwineScattered SpiderScattered Spider groupUNC3944Dimitris Gkoutzamanishttps://cisotimes.com/urgent-alert-lockbit-ransomware-targets-citrix-users-protect-your-network-now/https://cisotimes.com/urgent-alert-lockbit-ransomware-targets-citrix-users-protect-your-network-now/The recent discovery and exploitation of CVE-2023-4966, a significant vulnerability in Citrix NetScaler Gateway and ADC devices, underscores the criticalFri, 24 Nov 2023 00:00:00 GMTCitrixCVE-2023-4966NetscalerPatchingVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/new-poc-for-apache-activemqs-critical-flaw-unleashes-a-wave-of-cyber-mayhem/https://cisotimes.com/new-poc-for-apache-activemqs-critical-flaw-unleashes-a-wave-of-cyber-mayhem/The exploitation of a critical security flaw in Apache ActiveMQ, identified as CVE-2023-46604 with a CVSS score of 10.0, has raised significant concerns inWed, 15 Nov 2023 00:00:00 GMTActiveMQApacheCVE-2023-46604MalwareVulnCheckVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/cybersecurity-incident-reports-reach-all-time-high/https://cisotimes.com/cybersecurity-incident-reports-reach-all-time-high/The surge in reported cyber incidents to the UK's National Cyber Security Centre (NCSC), reaching an "all-time high" with a 64% increase in voluntary reports,Tue, 14 Nov 2023 00:00:00 GMTCVE-2023-3519National Cyber Security CentreNCSCNCSC-UKDimitris Gkoutzamanishttps://cisotimes.com/lockbit-ransomware-group-leaks-alleged-boeing-files-after-cyberattack/https://cisotimes.com/lockbit-ransomware-group-leaks-alleged-boeing-files-after-cyberattack/The LockBit ransomware group has reportedly leaked gigabytes of files claimed to be stolen from aerospace giant Boeing.Tue, 14 Nov 2023 00:00:00 GMTBoeingData BreachData LeakLockBitTheCISOhttps://cisotimes.com/report-nuclear-and-oil-gas-are-major-targets-in-2024/https://cisotimes.com/report-nuclear-and-oil-gas-are-major-targets-in-2024/The surge in ransomware operations targeting the energy sector, including nuclear facilities, is indeed alarming and underscores the evolving threat landscapeTue, 14 Nov 2023 00:00:00 GMTBlackCatCritical InfrastructureLockBitRansomwareDimitris Gkoutzamanishttps://cisotimes.com/chess-com-faces-data-breach-over-800000-user-records-leaked/https://cisotimes.com/chess-com-faces-data-breach-over-800000-user-records-leaked/A threat actor known as 'DrOne' has claimed responsibility for leaking a scraped database from Chess.com, a popular online platform for chess enthusiasts,Sat, 11 Nov 2023 00:00:00 GMTChessData BreachPersonal DataDimitris Gkoutzamanishttps://cisotimes.com/class-action-lawsuit-targets-intel-over-handling-of-downfall-vulnerability/https://cisotimes.com/class-action-lawsuit-targets-intel-over-handling-of-downfall-vulnerability/Intel is facing a class-action lawsuit over its management of speculative execution vulnerabilities, specifically the recently disclosed Downfall attackSat, 11 Nov 2023 00:00:00 GMTIntelMeltdownSpectreVulnerabilityTheCISOhttps://cisotimes.com/over-69-million-individuals-affected-from-moveit-cyberattack-in-the-state-of-maine/https://cisotimes.com/over-69-million-individuals-affected-from-moveit-cyberattack-in-the-state-of-maine/The State of Maine has become the latest victim to reveal the significant impact of a cyberattack targeting a zero-day vulnerability in Progress Software'sSat, 11 Nov 2023 00:00:00 GMTData BreachMOVEitState of MaineVulnerabilityzero dayDimitris Gkoutzamanishttps://cisotimes.com/ransomware-attack-on-chinas-biggest-bank-disrupts-treasury-market-trades/https://cisotimes.com/ransomware-attack-on-chinas-biggest-bank-disrupts-treasury-market-trades/Wall Street is grappling with the repercussions of a ransomware attack on China's Industrial and Commercial Bank of China (ICBC), the nation's largest bank.Sat, 11 Nov 2023 00:00:00 GMTCommercial Bank of ChinaICBCRansomwareTreasury MarketDimitris Gkoutzamanishttps://cisotimes.com/new-digital-risk-protection-report-from-brandshield-reveals-companies-lose-2-1m-on-average-to-each-online-attack/https://cisotimes.com/new-digital-risk-protection-report-from-brandshield-reveals-companies-lose-2-1m-on-average-to-each-online-attack/(New York, NY) – BrandShield, a leader in global digital risk protection, today announced its Digital Risk Protection Report. In a survey of 200Fri, 10 Nov 2023 00:00:00 GMTBrandShieldCyber AttacksDigital RiskSurveyTheCISOhttps://cisotimes.com/millenium-rat-malware-sold-on-github/https://cisotimes.com/millenium-rat-malware-sold-on-github/Millenium-RAT, a sophisticated Remote Access Tool (RAT) for Windows systems is now available for purchase on GitHub. This sophisticated Remote Access Tool, orThu, 09 Nov 2023 00:00:00 GMTGithubMalwareMillenium RATRATDimitris Gkoutzamanishttps://cisotimes.com/confluence-vulnerabilities-under-active-ransomware-exploitation/https://cisotimes.com/confluence-vulnerabilities-under-active-ransomware-exploitation/The findings from Rapid7's recent study regarding the targeting of vulnerabilities in Atlassian Confluence Servers by multiple ransomware groups areWed, 08 Nov 2023 00:00:00 GMTAtlassianCerber RansomwareConfluenceRansomwareRapid 7TheCISOhttps://cisotimes.com/marina-bay-sands-casino-resort-confirms-data-security-breach/https://cisotimes.com/marina-bay-sands-casino-resort-confirms-data-security-breach/Singapore's Marina Bay Sands, a renowned casino resort, has unfortunately fallen victim to a data security breach, impacting an estimated 665,000 non-casinoWed, 08 Nov 2023 00:00:00 GMTData BreachMarina Bay SandsSingaporeTheCISOhttps://cisotimes.com/north-korea-linked-lazarus-group-deploys-new-malware-targeting-blockchain-engineers/https://cisotimes.com/north-korea-linked-lazarus-group-deploys-new-malware-targeting-blockchain-engineers/The North Korea-linked Lazarus APT group has been observed employing a novel weapon in their arsenal - the KandyKorn macOS malware. This insidious tool hasSun, 05 Nov 2023 00:00:00 GMTblockchainKandyKornLazarusLazarus GroupThreat ActorsDimitris Gkoutzamanishttps://cisotimes.com/study-reveals-people-process-and-technology-challenges-limit-organizations-ability-to-prevent-attacks/https://cisotimes.com/study-reveals-people-process-and-technology-challenges-limit-organizations-ability-to-prevent-attacks/Tenable, the Exposure Management company, recently unveiled a comprehensive study that unveils the obstacles faced by cybersecurity and IT leaders as theyMon, 30 Oct 2023 00:00:00 GMTCloud SecurityCybersecuritySecurity ControlsTenableDimitris Gkoutzamanishttps://cisotimes.com/ukrainian-hackers-disrupt-russian-internet-services/https://cisotimes.com/ukrainian-hackers-disrupt-russian-internet-services/Ukrainian hackers, known as the IT Army, executed a significant DDoS attack, disrupting Russian internet services in occupied territories. This article explores the attack's impact, recovery efforts, and the broader implications.Sun, 29 Oct 2023 00:00:00 GMTCrimeaDDoSIT ArmyKrimTelekomMiranda-MediaMirTelekomTheCISOhttps://cisotimes.com/why-nist-included-governance-in-its-csf-2-0/https://cisotimes.com/why-nist-included-governance-in-its-csf-2-0/The National Institute of Standards and Technology (NIST) has been at the forefront of promoting cybersecurity best practices and standards. One of its mostSun, 29 Oct 2023 00:00:00 GMTNISTNIST CSFRisk ManagementSecurity FrameworksDimitris Gkoutzamanishttps://cisotimes.com/understanding-privilege-escalation-in-information-security/https://cisotimes.com/understanding-privilege-escalation-in-information-security/Privilege escalation is one of the core concepts of information security. It refers to the type of attack where a user gains higher levels of access overSat, 28 Oct 2023 00:00:00 GMTaccess controlcredentialprivilege escalationSocial EngineeringVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/microsoft-sheds-light-on-the-octo-tempest-threat-actor/https://cisotimes.com/microsoft-sheds-light-on-the-octo-tempest-threat-actor/In a recent release, Microsoft has provided an extensive analysis of a relatively obscure yet highly dangerous threat actor.Fri, 27 Oct 2023 00:00:00 GMTALPHVBlackCatMicrosoftMSPOcto TempestPhishingSIM SwapsSocial EngineeringDimitris Gkoutzamanishttps://cisotimes.com/experts-released-poc-exploit-code-for-vmware-aria-operations-for-logs-flaw/https://cisotimes.com/experts-released-poc-exploit-code-for-vmware-aria-operations-for-logs-flaw/VMware has become aware of a potentially critical security concern surrounding VMware Aria Operations for Logs, formerly known as vRealize Log Insight. AWed, 25 Oct 2023 00:00:00 GMTAriaExploitPoCVMwareVulnerabilityTheCISOhttps://cisotimes.com/norway-on-high-alert-as-cisco-zero-days-compromise-important-businesses/https://cisotimes.com/norway-on-high-alert-as-cisco-zero-days-compromise-important-businesses/In a recent security development, Norway's National Security Authority (NSM) issued a stark warning regarding the exploitation of two Cisco vulnerabilities,Wed, 25 Oct 2023 00:00:00 GMTCiscoCisco IOS XECVECVE-2023-20198ExploitNorwayNorway NSMVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/university-of-michigan-data-breach-an-in-depth-analysis/https://cisotimes.com/university-of-michigan-data-breach-an-in-depth-analysis/The University of Michigan has recently confirmed a significant data breach that came to light in August 2023. This breach had far-reaching consequences andWed, 25 Oct 2023 00:00:00 GMTData BreachMichiganPersonal DataUniversityTheCISOhttps://cisotimes.com/1passwords-response-to-the-okta-breach/https://cisotimes.com/1passwords-response-to-the-okta-breach/Recently, 1Password, a popular password management solution detected suspicious activity on its Okta instance on September 29. This event followed a supportTue, 24 Oct 2023 00:00:00 GMT0ktapus1PasswordOktaScatter SwineScattered SpiderUNC3944TheCISOhttps://cisotimes.com/cybercriminals-from-vietnam-exploiting-stolen-credentials/https://cisotimes.com/cybercriminals-from-vietnam-exploiting-stolen-credentials/Facebook, the global social networking giant led by Mark Zuckerberg, has found itself in the midst of an alarming challenge. Recent headlines have shed lightTue, 24 Oct 2023 00:00:00 GMTCookiesCybercriminalsFacebookVietnamTheCISOhttps://cisotimes.com/a-quarter-of-americans-have-had-their-health-data-compromised/https://cisotimes.com/a-quarter-of-americans-have-had-their-health-data-compromised/Data breaches within the healthcare sector in the United States are becoming an alarmingly frequent occurrence, and it's a trend that demands our attention.Sat, 21 Oct 2023 00:00:00 GMTData breachesHealthcarePatient DataDimitris Gkoutzamanishttps://cisotimes.com/major-breakthrough-arrest-of-ragnar-locker-ransomware-developer/https://cisotimes.com/major-breakthrough-arrest-of-ragnar-locker-ransomware-developer/In a significant international law enforcement operation, the authorities managed to apprehend a malware developer linked to the notorious Ragnar LockerSat, 21 Oct 2023 00:00:00 GMTDimitris Gkoutzamanishttps://cisotimes.com/malvertisers-use-google-ads-to-trap-users-into-installing-malware/https://cisotimes.com/malvertisers-use-google-ads-to-trap-users-into-installing-malware/a new and cunning malvertising campaign has surfaced, employing Google Ads to ensnare users searching for popular software. Malwarebytes, the cybersecuritySat, 21 Oct 2023 00:00:00 GMTCybersecurityDeceptive AdsGoogle AdsmalvertisingMalwarePunycodeSecurity ThreatsSoftwareThreat ActorsTheCISOhttps://cisotimes.com/munchkin-blackcat-ransomwares-latest-tool/https://cisotimes.com/munchkin-blackcat-ransomwares-latest-tool/The BlackCat ransomware operators have proven to be a formidable adversary, consistently adapting and innovating their malicious activities. Their relentlessSat, 21 Oct 2023 00:00:00 GMTBlackCatMalwareMunchkinPalo AltoRansomwareDimitris Gkoutzamanishttps://cisotimes.com/vulnerability-in-tinymce-text-editor-can-allow-attacker-execute-xss-payloads/https://cisotimes.com/vulnerability-in-tinymce-text-editor-can-allow-attacker-execute-xss-payloads/In the realm of text editors, TinyMCE has long been a popular choice, and on October 19, 2023, Tiny Technologies unveiled a significant update, versionSat, 21 Oct 2023 00:00:00 GMTCVECVE-2023-45818CVE-2023-45819ExploitmXSSTinyMCEVulnerabilityXSSDimitris Gkoutzamanishttps://cisotimes.com/attackers-exploiting-thousands-of-cisco-devices/https://cisotimes.com/attackers-exploiting-thousands-of-cisco-devices/Tens of thousands of physical and virtual devices running Cisco networking software have been compromised as the result of a yet-unpatched vulnerability,Wed, 18 Oct 2023 00:00:00 GMTCiscoCompromiseCVE-2023-20198CybersecurityData BreachInternet ServicesNetworkingVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/d-link-data-breach-uncovered-insights-and-impact/https://cisotimes.com/d-link-data-breach-uncovered-insights-and-impact/In a recent development that sent shockwaves through the cybersecurity landscape, global networking equipment and technology powerhouse D-Link has confirmed aWed, 18 Oct 2023 00:00:00 GMTCybersecuritycybersecurity responseD-LinkData BreachData SecurityPhishing Attackthreat actorDimitris Gkoutzamanishttps://cisotimes.com/googles-passwordless-revolution-passkey-login-security-as-default/https://cisotimes.com/googles-passwordless-revolution-passkey-login-security-as-default/In a groundbreaking move set to commence on January 16, 2024, Google is poised to redefine its online services by adopting passkey login security as theTue, 17 Oct 2023 00:00:00 GMTFace ScanFIDO AllianceFingerprint RecognitionGmailGoogleOnline SecurityPasskey LoginPasswordless Loginphishing attacksSendGridSpam ReductionTheCISOhttps://cisotimes.com/microsoft-launches-bug-bounty-program-for-ai-powered-bing-earn-up-to-15000-for-reporting-vulnerabilities/https://cisotimes.com/microsoft-launches-bug-bounty-program-for-ai-powered-bing-earn-up-to-15000-for-reporting-vulnerabilities/In a proactive move to bolster the security of its innovative AI-powered Bing platform, Microsoft has unveiled a dedicated bug bounty program. This initiativeTue, 17 Oct 2023 00:00:00 GMTAI IntegrationAI-Powered BingBing ChatBing IntegrationBing SearchBug BountyChatGPTCybersecurityM365 Bounty ProgramMalware DistributionMicrosoftOpenAISecurity ResearchersVulnerabilityTheCISOhttps://cisotimes.com/zero-day-vulnerability-in-cisco-ios-xe-exploited-in-the-wild/https://cisotimes.com/zero-day-vulnerability-in-cisco-ios-xe-exploited-in-the-wild/On October 16, Cisco's Talos issued a stern warning about a zero-day vulnerability lurking in the Web User Interface (Web UI) feature of Cisco IOS XE. ThisTue, 17 Oct 2023 00:00:00 GMTCiscoCisco TalosCVE-2021-1435CVE-2023-20198CybersecurityIncident ResponseNetwork SecuritySecurity AdvisoryThreat ActorsVulnerabilityZero-DayTheCISOhttps://cisotimes.com/hamas-hacked-idf-issues-urgent-evacuation-warnings-in-gaza/https://cisotimes.com/hamas-hacked-idf-issues-urgent-evacuation-warnings-in-gaza/Since the outbreak of the conflict, the Israel Defense Forces (IDF) have been actively issuing evacuation warnings to residents of specific Gaza StripFri, 13 Oct 2023 00:00:00 GMTAl-Aqsa TV Channel HackConflict CoverageCybersecurityEvacuation WarningsGaza StripHamasIDFOperation Swords of IronTheCISOhttps://cisotimes.com/unmasking-the-vulnerability-exploits-fueling-ransomware-attacks/https://cisotimes.com/unmasking-the-vulnerability-exploits-fueling-ransomware-attacks/In the ever-evolving landscape of cyber threats, threat actors have an arsenal of methods to infiltrate an organization's infrastructure. While the tacticsFri, 13 Oct 2023 00:00:00 GMTCISACVEsCyber ThreatsCybersecuritydigital securityMicrosoftRansomwarevulnerability exploitsDimitris Gkoutzamanishttps://cisotimes.com/millions-of-data-records-exposure-discovered-from-cybersecurity-researcher/https://cisotimes.com/millions-of-data-records-exposure-discovered-from-cybersecurity-researcher/In a recent cybersecurity discovery, Jeremiah Fowler, a dedicated researcher, came across a significant incident involving a renowned global CRM providerWed, 11 Oct 2023 00:00:00 GMTCybersecurityData ExposureTheCISOhttps://cisotimes.com/study-key-trends-and-challenges-in-online-safety/https://cisotimes.com/study-key-trends-and-challenges-in-online-safety/In collaboration with the National Cybersecurity Alliance (NCA), CybSafe has recently conducted comprehensive research to delve into the evolving landscape ofFri, 06 Oct 2023 00:00:00 GMTCybersecurityReportDimitris Gkoutzamanishttps://cisotimes.com/cloud-lateral-movement-via-exploited-sql-servers/https://cisotimes.com/cloud-lateral-movement-via-exploited-sql-servers/Recent findings by Microsoft security researchers have unveiled a concerning cyberattack campaign that involves lateral movement to a cloud environmentWed, 04 Oct 2023 00:00:00 GMTBest PracticesCloud IdentityCloud SecurityCybersecurityData Exfiltrationlateral movementMicrosoft DefenderSQL ServerThreat DetectionVulnerability MitigationDimitris Gkoutzamanishttps://cisotimes.com/cybersecurity-alert-hacktivist-group-siezes-nato-secrets-motel-one-hit-by-ransomware/https://cisotimes.com/cybersecurity-alert-hacktivist-group-siezes-nato-secrets-motel-one-hit-by-ransomware/In a chilling cyber twist, the notorious hacktivist collective known as "Hacktivist," or SiegedSec, has declared its possession of classified NATO documents.Wed, 04 Oct 2023 00:00:00 GMTALPHVCyber ThreatsCybercrimeCybersecurityData BreachEncryptionEuropean UnionHacktivistMotel OneNATORansomwareDimitris Gkoutzamanishttps://cisotimes.com/data-transformation-impact-of-security-governance-and-compliance/https://cisotimes.com/data-transformation-impact-of-security-governance-and-compliance/Data transformation occurs when raw data changes format, values, structure, or cleansing for human and computer interpretation to support organizationalWed, 20 Sep 2023 00:00:00 GMTComplianceData TransformationSecurity GovernanceDr. Daniel Harrisonhttps://cisotimes.com/the-most-common-azure-security-misconfigurations/https://cisotimes.com/the-most-common-azure-security-misconfigurations/The rise of cloud environment usage especially Microsoft Azure, has also brought new challenges for CISOs and security professionals. Following best practicesThu, 14 Sep 2023 00:00:00 GMTAzureBest PracticesCloudCloud SecurityMisconfigurationDimitris Gkoutzamanishttps://cisotimes.com/understanding-security-risks-in-pdf-files/https://cisotimes.com/understanding-security-risks-in-pdf-files/PDFs have become a universal format for sharing documents. However, threat actors have also recognized their potential as a vector for cyberattacks. In thisWed, 06 Sep 2023 00:00:00 GMTCybersecurityEmail AttachmentsEmail SecurityEndpoint SecurityMalicious PDFsPDF SecurityPDF ThreatsPhishing ProtectionDimitris Gkoutzamanishttps://cisotimes.com/security-does-not-have-to-be-expensive-open-source-tools-for-the-security-operation-center-soc/https://cisotimes.com/security-does-not-have-to-be-expensive-open-source-tools-for-the-security-operation-center-soc/Tools don't make a good engineer, but a good engineer can become great with the right tools.Tue, 05 Sep 2023 00:00:00 GMTAutomationCybersecuritycybersecurity toolsIDSincident managementmalware analysisNetwork SecuritySIEMThreat IntelligenceDimitris Gkoutzamanishttps://cisotimes.com/29-essential-tools-every-infosec-professional-must-know/https://cisotimes.com/29-essential-tools-every-infosec-professional-must-know/In the realm of information security and cybersecurity, having the right tools can make all the difference. In this article, we'll introduce you to 29Fri, 01 Sep 2023 00:00:00 GMTCyber DefenseCyber ThreatsCybersecurityData SecurityDNS AnalysisinfosecNetwork SecuritySecurity ToolsThreat IntelligenceVulnerability AssessmentDimitris Gkoutzamanishttps://cisotimes.com/new-cyber-extortion-approach-pay-our-ransom-or-your-gdpr-fines/https://cisotimes.com/new-cyber-extortion-approach-pay-our-ransom-or-your-gdpr-fines/ransomedWed, 30 Aug 2023 00:00:00 GMTGDPRRansomwareDimitris Gkoutzamanishttps://cisotimes.com/nist-announces-first-four-quantum-resistant-cryptographic-algorithms/https://cisotimes.com/nist-announces-first-four-quantum-resistant-cryptographic-algorithms/In an era where quantum computers loom on the horizon, safeguarding our digital privacy becomes an ever-pressing concern. The U.S. Department of Commerce'sThu, 24 Aug 2023 00:00:00 GMTCryptographyData SecurityEncryptionNISTPost-quantum cryptographyPrivacyquantum computingQuantum-resistant algorithmsDimitris Gkoutzamanishttps://cisotimes.com/navigating-cloud-security-solutions-exploring-the-differences-between-casb-and-sase/https://cisotimes.com/navigating-cloud-security-solutions-exploring-the-differences-between-casb-and-sase/In an era marked by digital transformation and cloud-first strategies, ensuring the security of sensitive data and maintaining regulatory compliance hasTue, 22 Aug 2023 00:00:00 GMTCASBCloud Access Security BrokerCloud SecurityDLPSASESecure Access Service EdgeDimitris Gkoutzamanishttps://cisotimes.com/android-updates-patching-over-40-vulnerabilities/https://cisotimes.com/android-updates-patching-over-40-vulnerabilities/Android has released its August Security patches, addressing over 40 vulnerabilities.Thu, 10 Aug 2023 00:00:00 GMTAndroidElevation of PrivilegesInformation DisclosureKernelMobile SecurityPatchingRemote Code ExecutionSecurity UpdatesTheCISOhttps://cisotimes.com/utilizing-ai-for-enhanced-cybersecurity-white-house-launches-contest-to-detect-and-resolve-software-vulnerabilities/https://cisotimes.com/utilizing-ai-for-enhanced-cybersecurity-white-house-launches-contest-to-detect-and-resolve-software-vulnerabilities/The White House has introduced a unique competition aimed at encouraging cybersecurity researchers to employ artificial intelligence (AI) in identifying andThu, 10 Aug 2023 00:00:00 GMTAIArtifical IntelligenceDARPADEFCONOpen SourceTheCISOhttps://cisotimes.com/crowdstrike-unveils-new-counter-adversary-operations-team-to-thwart-modern-breaches/https://cisotimes.com/crowdstrike-unveils-new-counter-adversary-operations-team-to-thwart-modern-breaches/On August 8, 2023, CrowdStrike, the renowned American cybersecurity technology company, introduced its latest initiative, the "CrowdStrike FalconWed, 09 Aug 2023 00:00:00 GMTBreachcrowdstrikeFalconThreat HuntingThreat IntelligenceDimitris Gkoutzamanishttps://cisotimes.com/how-to-protect-your-business-from-a-little-known-shockingly-simple-hacking-technique/https://cisotimes.com/how-to-protect-your-business-from-a-little-known-shockingly-simple-hacking-technique/"Search Engine Hacking," also called "Google dorking," has quickly become a favorite technique of hackers to find and expose private or sensitive informationWed, 09 Aug 2023 00:00:00 GMTGoogle DorkingGoogle SearchHackingOpen Source IntelligenceOWLsecStar Kashmanhttps://cisotimes.com/microsoft-addresses-74-software-vulnerabilities-in-august-2023-update-cycle/https://cisotimes.com/microsoft-addresses-74-software-vulnerabilities-in-august-2023-update-cycle/In its recent effort to enhance digital security, Microsoft has taken action to rectify a total of 74 vulnerabilities present in its software through theWed, 09 Aug 2023 00:00:00 GMTCybersecurityMicrosoftPatchingSoftware PatchingVulnerabilityTheCISOhttps://cisotimes.com/the-top-10-countries-facing-data-breaches-a-comprehensive-analysis/https://cisotimes.com/the-top-10-countries-facing-data-breaches-a-comprehensive-analysis/In recent years, the onslaught of cybersecurity attacks has intensified dramatically, culminating in a staggering 156% surge in security breaches worldwideSun, 06 Aug 2023 00:00:00 GMTData BreachReportSurfSharkThreatsDimitris Gkoutzamanishttps://cisotimes.com/chrome-security-update-17-new-security-fixes/https://cisotimes.com/chrome-security-update-17-new-security-fixes/Google has published a security update for Chrome, updating the Stable channel for Mac and Linux to 115.0.5790.170 and 115.0.5790.170/.171 for Windows.Fri, 04 Aug 2023 00:00:00 GMTBug BountyChromeGoogleVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/cyber-warfare-escalates-as-finland-joins-nato-insights-from-cybersecurity-expert/https://cisotimes.com/cyber-warfare-escalates-as-finland-joins-nato-insights-from-cybersecurity-expert/Since Finland's decision to join NATO, the country has witnessed an alarming surge in ransomware attacks.Fri, 04 Aug 2023 00:00:00 GMTCyber DefenseCyber ThreatsCyber WarfareFinlandGeopoliticsNATONCSCRansomwareRussiaUkraineTheCISOhttps://cisotimes.com/nodestealer-2-0-cryptocurrency-wallets-and-facebook-business-accounts-under-siege/https://cisotimes.com/nodestealer-2-0-cryptocurrency-wallets-and-facebook-business-accounts-under-siege/A discovery by Palo Alto Network Unit 42 has brought to light an advanced phishing campaign involving the NodeStealer 2.0, a Python variant of the infamousWed, 02 Aug 2023 00:00:00 GMTCryptocurrencyFacebookMalwarenodestealerPhishingTheCISOhttps://cisotimes.com/wikiloader-new-malware-as-a-service-targets-italian-organizations/https://cisotimes.com/wikiloader-new-malware-as-a-service-targets-italian-organizations/Italian organizations are facing a significant threat from a phishing campaign unleashed by threat actors deploying a potent new malware called WikiLoader.Wed, 02 Aug 2023 00:00:00 GMTMalwarePhishingUrsnifWikiLoaderTheCISOhttps://cisotimes.com/splunk-vulnerability-may-allow-attackers-to-execute-malicious-code/https://cisotimes.com/splunk-vulnerability-may-allow-attackers-to-execute-malicious-code/Splunk, a leading security solution, has recently uncovered a critical vulnerability within its powerful Security Orchestration, Automation, and ResponseTue, 01 Aug 2023 00:00:00 GMTANSI Escape CodesCVE-2023-3997CVSS ScoreMalicious Code ExecutionSecurity AdvisorySplunkSplunk SOARTerminal ApplicationUnauthenticated Log InjectionVulnerabilityTheCISOhttps://cisotimes.com/spyware-app-compromised-over-60000-android-devices-to-steal-sensitive-data/https://cisotimes.com/spyware-app-compromised-over-60000-android-devices-to-steal-sensitive-data/A dangerous spyware application called "Spyhide" has targeted and compromised over 60,000 Android devices worldwide, allowing the attackers to steal sensitiveTue, 01 Aug 2023 00:00:00 GMTAndroid DevicesCybersecurityData BreachData LeakPrivacyGerman Hosting ProviderHackingIranian DevelopersLocation HistoryPhotosSensitive DataSpyhideSpywareSpyware DetectionVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/millions-vanish-as-alphapo-hot-wallets-hacked/https://cisotimes.com/millions-vanish-as-alphapo-hot-wallets-hacked/On July 22, a staggering $31 million was stealthily siphoned from Alphapo's hot wallets on the Ethereum blockchain. While the extent of Bitcoin theft remainsMon, 24 Jul 2023 00:00:00 GMTAlphapoBitcoinConic FinanceCryptocurrencyDeFiEthereumHackinghot walletsHypeDropCybersecurityTheCISOhttps://cisotimes.com/ddos-botnets-exploiting-critical-flaw-in-zyxel-devices-worldwide/https://cisotimes.com/ddos-botnets-exploiting-critical-flaw-in-zyxel-devices-worldwide/Security researchers at Fortinet FortiGuard Labs have issued a serious warning about the increasing threat posed by various DDoS botnets, all taking advantageSun, 23 Jul 2023 00:00:00 GMTBotnetCommand InjectionCVE-2023-28771CybersecurityDDoS botnetsKatana botnetMirai-based botnetsVulnerabilityZyxel devicesTheCISOhttps://cisotimes.com/googles-virustotal-leak-exposes-defense-and-intelligence-employees/https://cisotimes.com/googles-virustotal-leak-exposes-defense-and-intelligence-employees/In an unintentional breach of cybersecurity, Google's VirusTotal platform disclosed the identities and email addresses of hundreds of individuals employed inFri, 21 Jul 2023 00:00:00 GMTCybersecurityData BreachData ProtectionDefense EmployeesGoogleIntelligence AgenciesPhishing AttemptsVirusTotalDimitris Gkoutzamanishttps://cisotimes.com/insights-from-a-ciso-2023-global-survey/https://cisotimes.com/insights-from-a-ciso-2023-global-survey/In today's rapidly evolving technological landscape, the role of chief information security officers (CISOs) is facing new challenges and opportunities. AsSun, 16 Jul 2023 00:00:00 GMTCISOCybersecurityManagementSurveyDimitris Gkoutzamanishttps://cisotimes.com/moveit-data-breach-hits-fidelity-more-than-371000-retirement-plan-participants-data-exposed/https://cisotimes.com/moveit-data-breach-hits-fidelity-more-than-371000-retirement-plan-participants-data-exposed/Pension Benefit Information LLC, operating as PBI Research Services, has disclosed a serious incident of data breach, leaving the personal information ofSun, 16 Jul 2023 00:00:00 GMTData BreachFidelityMOVEitPBIPBI Researchh ServicesTheCISOhttps://cisotimes.com/russias-state-tv-hacked-millions-told-the-hour-of-reckoning-has-come-in-ukrainian/https://cisotimes.com/russias-state-tv-hacked-millions-told-the-hour-of-reckoning-has-come-in-ukrainian/Russian leader Vladimir Putin faced a significant blow as his State TV channel fell victim to a humiliating primetime hack.Sun, 16 Jul 2023 00:00:00 GMTDeepfakeHackingRussiaState TVUkraineTheCISOhttps://cisotimes.com/blacklotus-uefi-bootkit-how-a-free-uefi-malware-code-puts-windows-machines-at-risk/https://cisotimes.com/blacklotus-uefi-bootkit-how-a-free-uefi-malware-code-puts-windows-machines-at-risk/In October of the previous year, a nefarious bootkit named BlackLotus surfaced on underground hacker forums. Crafted exclusively for Windows systems, thisFri, 14 Jul 2023 00:00:00 GMTBlackLotusbootkitCybersecurityHackingMalwareMicrosoftNSASource CodeThreat ActorsUEFIUEFI malwareVulnerabilityWindowsDimitris Gkoutzamanishttps://cisotimes.com/chinese-hackers-target-us-federal-agencies-u-s-government-agency-emails-compromised/https://cisotimes.com/chinese-hackers-target-us-federal-agencies-u-s-government-agency-emails-compromised/Chinese hackers have recently breached the email accounts of a US Federal Civilian Executive Branch (FCEB) agency, as part of a larger cyberespionage campaignThu, 13 Jul 2023 00:00:00 GMTauthentication tokensChinese HackersCISACloud SecuritycyberespionageCybersecurityFBIMFAMFA BypassMicrosoftThreat ActorsDimitris Gkoutzamanishttps://cisotimes.com/microsoft-patches-zero-day-vulnerabilities-and-addresses-issues-with-signed-drivers-being-used-maliciously/https://cisotimes.com/microsoft-patches-zero-day-vulnerabilities-and-addresses-issues-with-signed-drivers-being-used-maliciously/On this recent Patch Tuesday, Microsoft released a significant number of security patches for July 2023. With more than 100 vulnerabilities addressed,Thu, 13 Jul 2023 00:00:00 GMTCybersecuritykernel driversmalicious softwareMicrosoftPatch TuesdayVulnerabilityZero-Dayzero-day vulnerabilitiesDimitris Gkoutzamanishttps://cisotimes.com/ransomware-gangs-collect-449-million-in-extortion-profits-a-rising-threat-to-organizations/https://cisotimes.com/ransomware-gangs-collect-449-million-in-extortion-profits-a-rising-threat-to-organizations/Ransomware gangs have experienced a surge in profitability during the first half of this year, raking in over $449 million from their victims, as reported byThu, 13 Jul 2023 00:00:00 GMTChainalysisCybercrimeCybersecurityRansomwareDimitris Gkoutzamanishttps://cisotimes.com/beware-of-letscall-advanced-vishing-technique/https://cisotimes.com/beware-of-letscall-advanced-vishing-technique/Researchers have recently sounded the alarm about a sophisticated and emerging form of voice phishing (vishing) called "Letscall." This alarming technique isSun, 09 Jul 2023 00:00:00 GMTadvanced techniquesevasionfinancial fraudLetscallMalwareCybersecuritySouth KoreaVishingvoice phishingDimitris Gkoutzamanishttps://cisotimes.com/cisa-issues-warnings-as-new-vulnerabilities-in-moveit-software-expose-sensitive-information/https://cisotimes.com/cisa-issues-warnings-as-new-vulnerabilities-in-moveit-software-expose-sensitive-information/The federal government issues a strong warning about three recently discovered vulnerabilities in the popular MOVEit file transfer software. TheseSun, 09 Jul 2023 00:00:00 GMTCISACL0PClop ransomwareMalwareMOVEitRansomwareVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/decoding-the-ta453-threat-unleashing-advanced-malware-campaigns-targeting-windows-and-macos/https://cisotimes.com/decoding-the-ta453-threat-unleashing-advanced-malware-campaigns-targeting-windows-and-macos/TA453, a sophisticated nation-state actor, has been identified as an entity closely associated with various other notorious groups such as Charming Kitten,Sat, 08 Jul 2023 00:00:00 GMTAPTGorjolEchoIranNatio StateNokNokPowerShellProofpointDimitris Gkoutzamanishttps://cisotimes.com/the-internet-of-medical-things-and-cybersecurity-risk/https://cisotimes.com/the-internet-of-medical-things-and-cybersecurity-risk/The healthcare and life sciences industry continues to be plagued by cybersecurity threats.1 According to FTI Consulting's U.S. Healthcare & Life SciencesSat, 08 Jul 2023 00:00:00 GMTCybersecurityFTI ConsultingHealthcareIoTSurveyJamie Singerhttps://cisotimes.com/critical-flaw-in-fortinet-firewalls-exposes-ssl-vpn-interfaces-over-490000-devices-vulnerable/https://cisotimes.com/critical-flaw-in-fortinet-firewalls-exposes-ssl-vpn-interfaces-over-490000-devices-vulnerable/A recent report reveals a critical flaw in Fortinet firewalls, leaving over 490,000 devices at risk of exploitation. This article explores the vulnerability,Wed, 05 Jul 2023 00:00:00 GMTFortinetFortiOSVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/unmasking-smugx-chinese-hackers-deploy-stealthy-html-smuggling-techniques-in-europe/https://cisotimes.com/unmasking-smugx-chinese-hackers-deploy-stealthy-html-smuggling-techniques-in-europe/A sophisticated Chinese nation-state group has been identified employing HTML smuggling techniques to target Foreign Affairs ministries and embassies inWed, 05 Jul 2023 00:00:00 GMTChinese HackersDLL side-loadingEuropean UnionHTML SmugglingPlugXRATremote access trojansmugXTheCISOhttps://cisotimes.com/white-snake-stealer-a-formidable-info-stealer-targeting-windows-and-linux-platforms/https://cisotimes.com/white-snake-stealer-a-formidable-info-stealer-targeting-windows-and-linux-platforms/White Snake Stealer, an advanced information stealer, has recently evolved with enhanced features, making it capable of targeting both Windows and LinuxWed, 05 Jul 2023 00:00:00 GMTInfo StealerMalwareWhite SnakeDimitris Gkoutzamanishttps://cisotimes.com/the-pros-and-cons-of-virtual-chief-information-security-officers-vcisos/https://cisotimes.com/the-pros-and-cons-of-virtual-chief-information-security-officers-vcisos/An increasing number of modern security-conscious companies have Chief Information Security Officers (CISOs) on their payroll to manage the growing threat ofSun, 02 Jul 2023 00:00:00 GMTChief Information Security OfficerCISOSecurity LeadershipSecurity ServicesvCISODimitris Gkoutzamanishttps://cisotimes.com/avast-released-a-free-decryptor-for-the-akira-ransomware-that-can-allow-victims-to-recover-their-data-without-paying-the-ransom/https://cisotimes.com/avast-released-a-free-decryptor-for-the-akira-ransomware-that-can-allow-victims-to-recover-their-data-without-paying-the-ransom/Avast, the renowned cybersecurity firm, has released a free decryptor for the Akira ransomware. This decryptor enables victims to recover their encrypted dataSat, 01 Jul 2023 00:00:00 GMTAkiraAvastRansomwareRansomware decryptorDimitris Gkoutzamanishttps://cisotimes.com/half-of-edr-tools-organizations-vulnerable-to-clop-ransomware-research-says/https://cisotimes.com/half-of-edr-tools-organizations-vulnerable-to-clop-ransomware-research-says/In recent assessments conducted by cybersecurity company Cymulate, it was revealed that nearly half of the endpoint detection and response (EDR) tools andSat, 01 Jul 2023 00:00:00 GMTCL0PCymulateEDRMalwareMOVEitRansomwareVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/mitre-releases-annual-list-of-top-25-most-dangerous-software-weaknesses-for-2023/https://cisotimes.com/mitre-releases-annual-list-of-top-25-most-dangerous-software-weaknesses-for-2023/MITRE has recently released its annual list of the top 25 most dangerous software weaknesses for the year 2023.Fri, 30 Jun 2023 00:00:00 GMTMITRENVDVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/more-major-corporations-added-to-the-growing-moveit-victim-list/https://cisotimes.com/more-major-corporations-added-to-the-growing-moveit-victim-list/The recent MOVEit breach that has impacted two major energy corporations and numerous organizations. Discover the details of the hacking campaign, the vulnerability exploited, and the potential consequences for affected entities. Stay informed about the latest developments in cybersecurity and sa…Wed, 28 Jun 2023 00:00:00 GMTCL0PMOVEitRansomwareSchneider ElectricDimitris Gkoutzamanishttps://cisotimes.com/nessus-plugin-vulnerability-may-allow-attackers-escalate-the-privileges/https://cisotimes.com/nessus-plugin-vulnerability-may-allow-attackers-escalate-the-privileges/Nessus is a powerful vulnerability scanning tool developed by Tenable. With its comprehensive range of plugins, it provides organizations with the ability toWed, 28 Jun 2023 00:00:00 GMTCVE-2023-2005NessuspluginsCybersecuritySecurity UpdatesTenablevulnerability detectionVulnerability ScanningDimitris Gkoutzamanishttps://cisotimes.com/cryptojacking-campaign-exploiting-linux-and-iot-devices/https://cisotimes.com/cryptojacking-campaign-exploiting-linux-and-iot-devices/Microsoft researchers have identified a series of attacks that employ brute force techniques to gain unauthorized access to systems, enabling illicitTue, 27 Jun 2023 00:00:00 GMTBackdoorBotnetcrypto miningCryptojackingCybersecurityDDoSIoT devicesLinuxmalicious attacksOpenSSHrootkitsDimitris Gkoutzamanishttps://cisotimes.com/mayor-candidate-sues-latitude-for-negligence-in-safeguarding-customer-data/https://cisotimes.com/mayor-candidate-sues-latitude-for-negligence-in-safeguarding-customer-data/Shahriar Sean Saffari, an unsuccessful mayoral candidate in Australia, has initiated legal proceedings against a prominent financial services firm, accusingTue, 27 Jun 2023 00:00:00 GMTcompensationcustomer data protectionCyber AttacksCybersecurityData Breachfinancial servicesidentity theftlegal proceedingsprivacy breachTheCISOhttps://cisotimes.com/microsoft-exposes-rampant-credential-stealing-attacks-by-russian-hackers/https://cisotimes.com/microsoft-exposes-rampant-credential-stealing-attacks-by-russian-hackers/Microsoft has recently revealed a significant spike in credential-stealing attacks orchestrated by Midnight Blizzard, a Russian state-affiliated hacker group.Tue, 27 Jun 2023 00:00:00 GMTAPT28APT29credential-stealing attacksCybersecurityespionageMidnight BlizzardRussian cyberwarfareRussian hackersspear-phishingThreat ActorsTheCISOhttps://cisotimes.com/one-of-the-most-popular-open-source-systems-for-analytics-and-visualization-grafana-faces-security-flaw/https://cisotimes.com/one-of-the-most-popular-open-source-systems-for-analytics-and-visualization-grafana-faces-security-flaw/Grafana, a widely used open-source platform for analytics and visualization, has recently been discovered to have a security vulnerability. This system catersTue, 27 Jun 2023 00:00:00 GMTauthentication protocolsAzure ADCVE-2023-3128data analysisGrafanaopen-source systemssecurity flawvisualizationDimitris Gkoutzamanishttps://cisotimes.com/over-33-of-employees-are-clicking-malicious-links-according-to-phishing-report/https://cisotimes.com/over-33-of-employees-are-clicking-malicious-links-according-to-phishing-report/In recent years, the frequency and impact of data breaches have been on the rise. Organizations worldwide have suffered significant losses due to ransomwareTue, 27 Jun 2023 00:00:00 GMTCybersecurityData breachesemail threatsphishing awarenessphishing campaignsRansomwareSocial EngineeringDimitris Gkoutzamanishttps://cisotimes.com/the-internet-systems-consortium-isc-addressed-three-denial-of-service-dos-vulnerabilities-in-the-dns-software-suite-bind/https://cisotimes.com/the-internet-systems-consortium-isc-addressed-three-denial-of-service-dos-vulnerabilities-in-the-dns-software-suite-bind/The Internet Systems Consortium (ISC) recently announced the release of security updates for the DNS software suite BIND, addressing three criticalTue, 27 Jun 2023 00:00:00 GMTBINDCVE-2023-2828CVE-2023-2829CVE-2023-2911Denial-of-Service vulnerabilitiesDNSISC security updatesnamed resolverremote exploitationDimitris Gkoutzamanishttps://cisotimes.com/list-of-moveit-victim-organizations/https://cisotimes.com/list-of-moveit-victim-organizations/The risk analysis firm Kroll discovered a significant Zero Day vulnerability by the end of May 2023. The subsequent attack on MOVEit software, a business unitThu, 22 Jun 2023 00:00:00 GMTClop ransomwareCyber AttacksData Breachdouble extortionfinancial institutionsglobal impacthealth organizationsRussian intelligencevictim organizationsZero-DayTheCISOhttps://cisotimes.com/does-your-organization-require-a-full-time-ciso/https://cisotimes.com/does-your-organization-require-a-full-time-ciso/In an era of digital advancements and ever-evolving cyber threats, organizations of all sizes and industries must grapple with the critical decision ofMon, 12 Jun 2023 00:00:00 GMTChief Information Security OfficerCyber ThreatsCybersecurityCybersecurity StrategyPrivacyData ProtectionIncident Responseorganizational securityRegulatory Compliancerisk mitigationDimitris Gkoutzamanishttps://cisotimes.com/massive-ransomware-attack-hits-spanish-bank-client-and-employee-data-at-risk/https://cisotimes.com/massive-ransomware-attack-hits-spanish-bank-client-and-employee-data-at-risk/A prominent financial institution in Spain faces the brunt of a severe ransomware attack, impacting multiple branches and raising concerns over compromisedMon, 05 Jun 2023 00:00:00 GMTconfidential informationCybersecurityData Breachfinancial sectorGlobalcajaPersonal DataPlay ransomware groupRansomware AttackSpainSpanish bankDimitris Gkoutzamanishttps://cisotimes.com/amazon-faces-31-million-penalty-for-privacy-violations/https://cisotimes.com/amazon-faces-31-million-penalty-for-privacy-violations/Amazon recently reached a settlement with the Federal Trade Commission (FTC) after facing two civil complaints. The allegations against the company involvedSat, 03 Jun 2023 00:00:00 GMTAlexa devicesAmazoncompensationFederal Trade CommissionFTC settlementprivacy breachprivacy violationRing camerassecurity breachesDimitris Gkoutzamanishttps://cisotimes.com/unmasking-the-threat-unveiling-the-zero-click-ios-malware-exploitation/https://cisotimes.com/unmasking-the-threat-unveiling-the-zero-click-ios-malware-exploitation/Kaspersky, a leading cybersecurity firm, has recently disclosed a disconcerting revelation regarding the compromise of numerous iPhones connected to itsSat, 03 Jun 2023 00:00:00 GMTC&C domainsCybersecurityiMessage securityiOS securityiPhone vulnerabilitiesKasperskymobile malwareOperation Triangulationzero-click exploitsDimitris Gkoutzamanishttps://cisotimes.com/us-intelligence-accused-of-massive-apple-phone-hacking-campaign-by-russian-fsb/https://cisotimes.com/us-intelligence-accused-of-massive-apple-phone-hacking-campaign-by-russian-fsb/The Russian Federal Security Service (FSB) has leveled serious accusations against the United States Intelligence Community, alleging a large-scale hackingSat, 03 Jun 2023 00:00:00 GMTAppleCybersecuritydiplomatic missionsFSBHackingintelligence communityiOS malwareKasperskyNSAprivacy breachRussiaSurveillanceUnited StatesDimitris Gkoutzamanishttps://cisotimes.com/financially-motivated-actor-targets-unsecured-apache-nifi-instances-for-covert-cryptocurrency-mining/https://cisotimes.com/financially-motivated-actor-targets-unsecured-apache-nifi-instances-for-covert-cryptocurrency-mining/Discoveries by the SANS Internet Storm Center (ISC) shed light on an ongoing campaign orchestrated by a financially motivated threat actor. This cyberWed, 31 May 2023 00:00:00 GMTApache NiFicryptocurrency miningKinsing malwarelateral movementpersistenceSANS Internet Storm Centerthreat actorvulnerability exploitationTheCISOhttps://cisotimes.com/the-alarming-vulnerabilities-of-solar-panels-powering-up-cyber-threats/https://cisotimes.com/the-alarming-vulnerabilities-of-solar-panels-powering-up-cyber-threats/Solar panels, once seen as a beacon of clean energy, are now facing a new threat – cyber attacks. Digital Watchdog RDI experts warn that hackers areWed, 31 May 2023 00:00:00 GMTCritical InfrastructureCyber AttacksCybersecuritydistributed denial-of-service attacksinvertersrenewable energysolar panelsDimitris Gkoutzamanishttps://cisotimes.com/barracuda-zero-day-vulnerability-breach-raises-cybersecurity-concerns-urgent-action-required/https://cisotimes.com/barracuda-zero-day-vulnerability-breach-raises-cybersecurity-concerns-urgent-action-required/The recent discovery of a zero-day vulnerability in Barracuda's Email Security Gateway (ESG) appliances has raised serious concerns in the cybersecurityMon, 29 May 2023 00:00:00 GMTBarracudaBreachCISACybersecurityEmail Security GatewayKnown Exploited Vulnerabilities CatalogZero-DayDimitris Gkoutzamanishttps://cisotimes.com/empowering-national-defense-department-of-defense-unveils-cutting-edge-cyber-strategy/https://cisotimes.com/empowering-national-defense-department-of-defense-unveils-cutting-edge-cyber-strategy/The Department of Defense (DoD) has taken a significant step towards fortifying the nation's cybersecurity by submitting its groundbreaking classified cyberMon, 29 May 2023 00:00:00 GMTcyber operationscyber strategyCybersecuritydefend forwardDepartment of Defensejoint forcenational securityTheCISOhttps://cisotimes.com/unveiling-teslas-autopilot-challenges-widespread-complaints-and-data-privacy-concerns/https://cisotimes.com/unveiling-teslas-autopilot-challenges-widespread-complaints-and-data-privacy-concerns/A recent report in the esteemed German newspaper Handelsblatt sheds light on an alarming number of complaints regarding Tesla Inc's vehicles. According to theMon, 29 May 2023 00:00:00 GMTAutopilotcomplaintsPrivacyregulatory interventionsafety flawsself-driving carsTeslaDimitris Gkoutzamanishttps://cisotimes.com/unveiling-volt-typhoon-a-state-sponsored-cyber-threat-from-china/https://cisotimes.com/unveiling-volt-typhoon-a-state-sponsored-cyber-threat-from-china/US and global cybersecurity agencies issue a joint advisory, shedding light on the activities of a state-sponsored cyber actor called "Volt Typhoon"Mon, 29 May 2023 00:00:00 GMTDimitris Gkoutzamanishttps://cisotimes.com/apple-restricting-ai-tools-to-safeguard-confidential-data/https://cisotimes.com/apple-restricting-ai-tools-to-safeguard-confidential-data/Apple, renowned for its commitment to safeguarding sensitive information, has recently taken decisive measures to address concerns about the exposure of itsWed, 24 May 2023 00:00:00 GMTAI toolsAlexaAppleArtificial IntelligencebansChatGPTChatGPT incidentconfidential dataData Securityin-house AI botSiriuser privacyTheCISOhttps://cisotimes.com/former-it-security-analyst-turns-dark-inside-the-shocking-cyber-attack-hijack/https://cisotimes.com/former-it-security-analyst-turns-dark-inside-the-shocking-cyber-attack-hijack/A former IT security analyst at Oxford Biomedica recently confessed to an astonishing act that took place five years ago. In an unexpected twist, the analystWed, 24 May 2023 00:00:00 GMTBitcoinCyber AttacksCybersecuritydigital crimeInsider ThreatRansomwareDimitris Gkoutzamanishttps://cisotimes.com/unveiling-the-reign-of-gui-vil-financially-motivated-cyberthreat-group-targeting-aws-accounts/https://cisotimes.com/unveiling-the-reign-of-gui-vil-financially-motivated-cyberthreat-group-targeting-aws-accounts/A financially motivated cyberthreat group has been identified, relentlessly attacking organizations' Amazon Web Services (AWS) accounts with the intent toWed, 24 May 2023 00:00:00 GMTAWS attacksCloud SecurityCryptocurrencyCryptojackingcryptominingCyber Attackscyberthreat groupGUI-vilHackingThreat ActorsDimitris Gkoutzamanishttps://cisotimes.com/meta-slapped-with-e1-2-billion-gdpr-penalty/https://cisotimes.com/meta-slapped-with-e1-2-billion-gdpr-penalty/Meta, the parent company of Facebook, has incurred a hefty penalty of €1.2 billion for violating the General Data Protection Regulation (GDPR) rules byTue, 23 May 2023 00:00:00 GMTPrivacyEuropean UnionGDPRMetaDimitris Gkoutzamanishttps://cisotimes.com/unveiling-the-resilience-of-satellite-infrastructure-ethical-hackers-expose-vulnerabilities/https://cisotimes.com/unveiling-the-resilience-of-satellite-infrastructure-ethical-hackers-expose-vulnerabilities/In a bid to evaluate the security measures protecting satellite infrastructure, the European Space Agency (ESA) recently challenged a group of ethical hackersTue, 23 May 2023 00:00:00 GMTChina's cyber defense infrastructureCyber Resiliencedata manipulationethical hackersglobal perspectivessatellite imagingsatellite infrastructuresatellite securitysecurity measuresUS Space ForceVulnerabilitywhite hat hackersDimitris Gkoutzamanishttps://cisotimes.com/beware-of-malicious-packages-turkorat-malware-concealed-in-npm-repository/https://cisotimes.com/beware-of-malicious-packages-turkorat-malware-concealed-in-npm-repository/Recently, two packages named nodejs-encrypt-agent and nodejs-cookie-proxy-agent were detected on the npm package repository. Shockingly, these packagesFri, 19 May 2023 00:00:00 GMTcapitalization deceptionCybersecuritydeceptioninformation stealermalicious packagesnpm package repositoryopen source softwarePython Package Indexsupply chain attacksThreat ActorsTurkoRat malwareTyposquattingVS Code extensions marketplaceDimitris Gkoutzamanishttps://cisotimes.com/empowering-gmail-users-dark-web-monitoring-and-exciting-feature-upgrades-from-google/https://cisotimes.com/empowering-gmail-users-dark-web-monitoring-and-exciting-feature-upgrades-from-google/Google has recently announced a series of updates aimed at enhancing security and user experience. One of the key highlights is the introduction of dark webFri, 19 May 2023 00:00:00 GMTdark web monitoringPrivacyfeature upgradesGmailCybersecurityDimitris Gkoutzamanishttps://cisotimes.com/the-powerful-phishing-as-a-service-platform-targeting-microsoft-365-users/https://cisotimes.com/the-powerful-phishing-as-a-service-platform-targeting-microsoft-365-users/In the treacherous world of cybercrime, a formidable adversary has emerged - Greatness, the insidious Phishing-as-a-Service (PhaaS) platform. Since itsFri, 19 May 2023 00:00:00 GMTAPI keyCybercrimedeceptionGreatnessMicrosoft 365phishing-as-a-serviceCybersecurityTwo-Factor AuthenticationwebinarZero TrustDimitris Gkoutzamanishttps://cisotimes.com/discord-data-breach-unveiling-a-security-incident-and-enhancing-user-protection/https://cisotimes.com/discord-data-breach-unveiling-a-security-incident-and-enhancing-user-protection/Discord, the popular messaging platform, recently alerted its users about a data breach that occurred when a threat actor gained unauthorized access to aTue, 16 May 2023 00:00:00 GMTcollaborationData BreachDiscordgaming communitymalicious actorspersonal information compromisesecurity measuressuspicious activitiesthird-party suppliersuser notificationvigilantZendeskTheCISOhttps://cisotimes.com/unveiling-the-power-packed-merdoor-lancefly-apt-groups-custom-backdoor-wreaks-havoc-in-south-and-southeast-asia/https://cisotimes.com/unveiling-the-power-packed-merdoor-lancefly-apt-groups-custom-backdoor-wreaks-havoc-in-south-and-southeast-asia/The Lancefly APT group has emerged as a formidable threat, employing a custom-written backdoor known as Merdoor, which is unleashing havoc on organizationsTue, 16 May 2023 00:00:00 GMTAPT groupsCyber AttacksCybersecurityintelligence gatheringLancefly APTMerdoor backdoorSouth AsiaSoutheast AsiaDimitris Gkoutzamanishttps://cisotimes.com/detecting-unquoted-service-paths-an-essential-security-measure-for-penetration-testers-and-blue-teams/https://cisotimes.com/detecting-unquoted-service-paths-an-essential-security-measure-for-penetration-testers-and-blue-teams/As a cybersecurity professional, it's essential to understand and address potential security threats that may exist within an organization. One such threat isMon, 01 May 2023 00:00:00 GMTBlue TeamCybersecurityPenetration TestingPowerShellPythonRed Teamsecurity vulnerabilitiesunquoted service pathsDimitris Gkoutzamanishttps://cisotimes.com/lockbit-ransomware-group-issues-unconditional-apology-and-promises-free-decryptor-for-victims/https://cisotimes.com/lockbit-ransomware-group-issues-unconditional-apology-and-promises-free-decryptor-for-victims/In a surprising turn of events, the notorious LockBit ransomware group issued an unconditional apology for its recent attack on the Olympia Community UnitThu, 27 Apr 2023 00:00:00 GMTCybersecurityDark WebLockBitRansomwareTheCISOhttps://cisotimes.com/securing-cloud-data-with-a-casb-a-guide-to-selection-and-implementation/https://cisotimes.com/securing-cloud-data-with-a-casb-a-guide-to-selection-and-implementation/With the rise in cloud adoption, companies are increasingly using cloud-based applications, which present a new set of cybersecurity challenges. One solutionThu, 27 Apr 2023 00:00:00 GMTCASBCloudDimitris Gkoutzamanishttps://cisotimes.com/trigona-ransomware-a-menacing-threat-to-windows-users/https://cisotimes.com/trigona-ransomware-a-menacing-threat-to-windows-users/Trigona ransomware is a newly discovered malware that poses a serious threat to Windows users. The Unit42 research team at Palo Alto Networks recentlySun, 23 Apr 2023 00:00:00 GMTCybersecurityEncryptionMalwareMimikatzRansomwareTrigona ransomwareDimitris Gkoutzamanishttps://cisotimes.com/breach-alert-kodis-user-database-hacked-and-stolen/https://cisotimes.com/breach-alert-kodis-user-database-hacked-and-stolen/Open-source media player software provider, Kodi, has announced a data breach after hackers stole the company's MyBB forum database, including privateSun, 16 Apr 2023 00:00:00 GMTBreachforumsCyber AttacksCybercrimeData BreachKodiMyBB forum databasepassword resetThreat Actorsuser dataDimitris Gkoutzamanishttps://cisotimes.com/beware-of-malicious-loaders-android-apps-infected-with-trojanized-malware/https://cisotimes.com/beware-of-malicious-loaders-android-apps-infected-with-trojanized-malware/As the number of mobile phone users is increasing, so is the number of security threats that come along with it. Criminals have found a new way to evadeTue, 11 Apr 2023 00:00:00 GMTAndroid ApplicationsAPK Binding ServicesDropper AppsGoogle Play Developer AccountGoogle Play StoreMalicious LoadersThreat ActorsTrojanized MalwareTheCISOhttps://cisotimes.com/cyber-attack-on-nato-by-killnet-a-threat-to-global-security/https://cisotimes.com/cyber-attack-on-nato-by-killnet-a-threat-to-global-security/Cyber attacks have become a rising threat to global security, and one such group that has gained notoriety is KillNet. Originating during the Russian invasionTue, 11 Apr 2023 00:00:00 GMTCyber AttacksCybersecurityData LeakGlobal SecurityHackingKillnetNATOTheCISOhttps://cisotimes.com/unmasking-the-cryptocurrency-stealer-malware-a-sophisticated-supply-chain-attack-on-net-developers/https://cisotimes.com/unmasking-the-cryptocurrency-stealer-malware-a-sophisticated-supply-chain-attack-on-net-developers/Recently, cybersecurity researchers uncovered the techniques used in a sophisticated supply chain attack aimed at .NET developers.Tue, 11 Apr 2023 00:00:00 GMT.NETCryptocurrency Stealer MalwareCybersecurityImpala Stealersupply chain attackTyposquattingTheCISOhttps://cisotimes.com/amazon-bans-flipper-zero-multi-tool-for-pen-testing-due-to-alleged-card-skimming-capabilities/https://cisotimes.com/amazon-bans-flipper-zero-multi-tool-for-pen-testing-due-to-alleged-card-skimming-capabilities/Amazon recently banned the sale of the Flipper Zero portable multi-tool for pen-testers, alleging that it has card-skimming capabilities. This move hasSun, 09 Apr 2023 00:00:00 GMTAmazonFlipper ZeroTheCISOhttps://cisotimes.com/microsoft-and-fortras-legal-crackdown-on-cobalt-strike-a-significant-blow-to-cybercriminals/https://cisotimes.com/microsoft-and-fortras-legal-crackdown-on-cobalt-strike-a-significant-blow-to-cybercriminals/A recent joint operation between Microsoft's Digital Crimes Unit (DCU), Fortra, and the Health-ISAC has resulted in a major legal crackdown against serversSun, 09 Apr 2023 00:00:00 GMTCobalt StrikecollaborationCybersecuritycybersecurity toolsFortraHackinglegal crackdownMicrosoftRansomwareThreat ActorsDimitris Gkoutzamanishttps://cisotimes.com/opt-out-of-facebooks-targeted-advertising-a-quick-and-easy-way-to-protect-your-privacy/https://cisotimes.com/opt-out-of-facebooks-targeted-advertising-a-quick-and-easy-way-to-protect-your-privacy/Privacy watchdog, noyb, has developed a tool that empowers users to opt-out of targeted advertising and other claims made by Meta, formerly Facebook andSun, 09 Apr 2023 00:00:00 GMTFacebookGDPRInstagramlegitimate interestMetaopt-outPrivacytargeted advertisingTheCISOhttps://cisotimes.com/protect-your-apple-devices-two-zero-day-vulnerabilities-exploited-by-hackers/https://cisotimes.com/protect-your-apple-devices-two-zero-day-vulnerabilities-exploited-by-hackers/Apple has always been known for its state-of-the-art technology, and the brand's devices have become an integral part of our daily lives. However, withSun, 09 Apr 2023 00:00:00 GMTAppleCybersecurityIOSurfaceAcceleratorWebKitzero-day vulnerabilitiesTheCISOhttps://cisotimes.com/protect-your-network-now-us-cisa-adds-veritas-backup-exec-vulnerabilities-to-its-exploited-vulnerabilities-catalog/https://cisotimes.com/protect-your-network-now-us-cisa-adds-veritas-backup-exec-vulnerabilities-to-its-exploited-vulnerabilities-catalog/The Cybersecurity and Infrastructure Security Agency (CISA) in the US has recently updated its Known Exploited Vulnerabilities Catalog to include five newSun, 09 Apr 2023 00:00:00 GMTTheCISOhttps://cisotimes.com/ubers-law-firm-suffers-third-party-data-theft-exposes-driver-information/https://cisotimes.com/ubers-law-firm-suffers-third-party-data-theft-exposes-driver-information/Uber, a leading ride-hailing service, has once again faced a data breach that compromised the information of its drivers. This time, the hack targeted GenovaSun, 09 Apr 2023 00:00:00 GMTCybersecurityData Breachsupply chain attackthird-partyUberTheCISOhttps://cisotimes.com/protect-your-android-device-now-critical-security-vulnerabilities-discovered/https://cisotimes.com/protect-your-android-device-now-critical-security-vulnerabilities-discovered/In the April 2023 Android Security Bulletin, Google announced the discovery of critical security vulnerabilities that can impact Android devices runningThu, 06 Apr 2023 00:00:00 GMTAndroidCVEExploitedRemote Code ExecutionSecurity BulletinUpdatesVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/ransomware-analysis-discovering-the-unique-features-of-rorschach/https://cisotimes.com/ransomware-analysis-discovering-the-unique-features-of-rorschach/Rorschach is a newly discovered ransomware strain that has caught the attention of the cybersecurity industry. It was discovered by the Cybersecurity andThu, 06 Apr 2023 00:00:00 GMTCISACybersecurityEncryptionhybrid-cryptographyMalwarepropagationRansomwareRorschachDimitris Gkoutzamanishttps://cisotimes.com/tiktok-fined-15-6-million-for-misusing-children-data/https://cisotimes.com/tiktok-fined-15-6-million-for-misusing-children-data/TikTok, the popular social media app, has been fined $15.6 million (£12.7 million) by the UK's data protection watchdog, the Information Commissioner's OfficeThu, 06 Apr 2023 00:00:00 GMTchild safetyData ProtectionfineICOSocial MediaTikTokDimitris Gkoutzamanishttps://cisotimes.com/massive-cybersecurity-breach-at-latitude-financial-services-over-300000-customers-affected/https://cisotimes.com/massive-cybersecurity-breach-at-latitude-financial-services-over-300000-customers-affected/Latitude Financial Services, an Australian finance company, has become the latest victim of a sophisticated cyber attack, which has seen the personal data ofMon, 27 Mar 2023 00:00:00 GMTCyber AttacksCybersecuritydata retention policiesFraudidentity theftLatitude Financial ServicesPersonal DataDimitris Gkoutzamanishttps://cisotimes.com/nca-shuts-down-illegal-ddos-for-hire-services-operation-power-off/https://cisotimes.com/nca-shuts-down-illegal-ddos-for-hire-services-operation-power-off/The National Crime Agency (NCA) has announced that it has successfully infiltrated several online criminal marketplaces that offer Distributed Denial ofMon, 27 Mar 2023 00:00:00 GMTBootersCybercrimeDDoSNCAOperation Power OffTheCISOhttps://cisotimes.com/redis-bug-exposes-personal-information-of-chatgpt-users/https://cisotimes.com/redis-bug-exposes-personal-information-of-chatgpt-users/OpenAI's chatbot service, ChatGPT, recently suffered a data exposure incident, where users' personal information and chat titles were accidentally madeMon, 27 Mar 2023 00:00:00 GMTChatGPTCybersecurityData ExposurePrivacyopen-source librariesOpenAIRedisRedis bugDimitris Gkoutzamanishttps://cisotimes.com/beware-of-nexus-a-new-android-banking-trojan-targeting-financial-apps/https://cisotimes.com/beware-of-nexus-a-new-android-banking-trojan-targeting-financial-apps/A newly discovered Android banking trojan called Nexus is causing havoc in the financial industry. Cybersecurity analysts at Cleafy detected the malware inSun, 26 Mar 2023 00:00:00 GMT2FAAndroid banking trojanATO attacksC2Cybersecurityfinancial appsMaaSNexusRansomwareThreat ActorsDimitris Gkoutzamanishttps://cisotimes.com/hacker-site-mastermind-charged-by-us-doj-for-operating-breachforums/https://cisotimes.com/hacker-site-mastermind-charged-by-us-doj-for-operating-breachforums/The United States Department of Justice has made a significant breakthrough in the fight against cybercrime. On Friday, the department announced that aSun, 26 Mar 2023 00:00:00 GMTBreachforumsCybercrimeCybersecurityData breacheshackerUS DOJDimitris Gkoutzamanishttps://cisotimes.com/new-malware-used-in-cyber-espionage-campaign-targeting-russian-occupied-regions-in-ukraine/https://cisotimes.com/new-malware-used-in-cyber-espionage-campaign-targeting-russian-occupied-regions-in-ukraine/A recent cyber espionage campaign has been discovered by Russian-based infosec software vendor Kaspersky.Sat, 25 Mar 2023 00:00:00 GMTcyber espionagecyber threatKasperskyMalwareRussiaUkraineDimitris Gkoutzamanishttps://cisotimes.com/protect-your-microsoft-cloud-environments-with-cisas-open-source-incident-response-tool-untitled-goose-tool/https://cisotimes.com/protect-your-microsoft-cloud-environments-with-cisas-open-source-incident-response-tool-untitled-goose-tool/The Cybersecurity and Infrastructure Security Agency (CISA) has introduced a new open-source incident response tool called the Untitled Goose Tool. ThisSat, 25 Mar 2023 00:00:00 GMTCISACyber AttacksCyber Security Evaluation ToolCybersecurityincident response toolMicrosoft cloud environmentsMITRE ATT&CK mapping reportsRansomwareRansomware Readiness AssessmentUntitled Goose ToolDimitris Gkoutzamanishttps://cisotimes.com/massive-bitcoin-theft-general-bytes-suffers-1-5-million-breach/https://cisotimes.com/massive-bitcoin-theft-general-bytes-suffers-1-5-million-breach/General Bytes, a major producer of cryptocurrency automated teller machines (ATMs), was recently hit by a security breach that resulted in the theft of overThu, 23 Mar 2023 00:00:00 GMTAPI keysBitcoinCASCryptocurrencyexchangesFirewallGeneral Byteshot walletssecurity breachsecurity measurestheftVPNDimitris Gkoutzamanishttps://cisotimes.com/new-perlbot-malware-targeting-poorly-managed-linux-ssh-servers/https://cisotimes.com/new-perlbot-malware-targeting-poorly-managed-linux-ssh-servers/AhnLab Security Emergency Response Center (ASEC) has uncovered a new variant of the ShellBot malware, which is also known as PerlBot. This Perl-based DDoS botThu, 23 Mar 2023 00:00:00 GMTAhnLab Security Emergency Response CenterASECDDoS attacksdictionary attacksLinux serversPerlBot malwareShellBot malwareSSH bruteforce attacksDimitris Gkoutzamanishttps://cisotimes.com/protecting-our-transport-enisas-cyber-threat-landscape-report/https://cisotimes.com/protecting-our-transport-enisas-cyber-threat-landscape-report/ENISA, the European Union Agency for Cybersecurity, has released its first-ever Cyber Threat Landscape Report for the transport sector. The report coversThu, 23 Mar 2023 00:00:00 GMTaviation sectorcritical infrastructuresCyber ThreatsCybersecurityENISAIT SystemsOT operationsRansomwareThreat Actorstransport sectorDimitris Gkoutzamanishttps://cisotimes.com/uncovering-the-menacing-tactics-of-mispadu-protecting-against-the-rampant-credential-theft/https://cisotimes.com/uncovering-the-menacing-tactics-of-mispadu-protecting-against-the-rampant-credential-theft/A total of twenty spam campaigns were found to have targeted Chile, Mexico, Peru, and Portugal according to Metabaseq researchers' investigation.Thu, 23 Mar 2023 00:00:00 GMTChilecredential theftCybercrimeCybersecurityLatin AmericaMalwareMexicoMispaduPeruPortugalDimitris Gkoutzamanishttps://cisotimes.com/hackers-breach-ferrari-and-nbas-data-systems/https://cisotimes.com/hackers-breach-ferrari-and-nbas-data-systems/Data breaches are becoming increasingly common, with many companies falling victim to the sophisticated tactics of cybercriminals. Recently, Ferrari and theTue, 21 Mar 2023 00:00:00 GMTCybersecurityData breachesFerrariHackersNBARansomwareTheCISOhttps://cisotimes.com/zcryptor-ransomware-attacks-targeting-vmware-systems/https://cisotimes.com/zcryptor-ransomware-attacks-targeting-vmware-systems/The Italian National Cybersecurity Agency (ACN) has sounded the alarm on a new ransomware threat that is targeting unpatched VMware systems. The ransomware,Mon, 20 Mar 2023 00:00:00 GMTACNCISACybersecurityESXiArgsRansomwareVMwareZCryptorTheCISOhttps://cisotimes.com/chinese-hacking-group-linked-to-zero-day-exploitation-of-fortinet-fortios-security-flaw/https://cisotimes.com/chinese-hacking-group-linked-to-zero-day-exploitation-of-fortinet-fortios-security-flaw/Threat intelligence firm Mandiant has attributed the zero-day exploitation of a medium-severity security flaw in the Fortinet FortiOS operating system to aSun, 19 Mar 2023 00:00:00 GMTarbitrary code executionChinese hacking groupCybersecurityFirewallFortinet FortiOSMandiantpatchThreat IntelligenceUNC3886virtualization technologiesVulnerabilityzero-day exploitationTheCISOhttps://cisotimes.com/how-to-protect-yourself-from-gpt-4-scammers-tips-to-avoid-crypto-phishing-scams/https://cisotimes.com/how-to-protect-yourself-from-gpt-4-scammers-tips-to-avoid-crypto-phishing-scams/The launch of OpenAI's GPT-4 has created a buzz among artificial intelligence and cryptocurrency enthusiasts. Unfortunately, scammers have also taken noticeSun, 19 Mar 2023 00:00:00 GMTCryptocurrencyGPT-4OpenAIPhishingscamwallet securityDimitris Gkoutzamanishttps://cisotimes.com/the-evolution-of-pentest-frameworks-from-past-to-present/https://cisotimes.com/the-evolution-of-pentest-frameworks-from-past-to-present/Pentest frameworks serve as a foundation for conducting systematic and efficient penetration tests. These tools streamline the testing process by offering aSun, 19 Mar 2023 00:00:00 GMTPenetration TestingPenetration Testing FrameworksDimitris Gkoutzamanishttps://cisotimes.com/free-decryption-tool-helps-hundreds-of-victims-recover-files-from-modified-conti-ransomware/https://cisotimes.com/free-decryption-tool-helps-hundreds-of-victims-recover-files-from-modified-conti-ransomware/Cybersecurity researchers have discovered a decryption tool that could help hundreds of victims who have fallen prey to a modified version of the ContiSat, 18 Mar 2023 00:00:00 GMTConti ransomwareCybersecuritydecryption toolKasperskyMeowCorpRansomwareRyuk ransomwareTrickBotDimitris Gkoutzamanishttps://cisotimes.com/protecting-your-phone-from-the-exynos-modem-vulnerabilities-what-you-need-to-know/https://cisotimes.com/protecting-your-phone-from-the-exynos-modem-vulnerabilities-what-you-need-to-know/In late 2022 and early 2023, Project Zero discovered a series of vulnerabilities in Exynos Modems produced by Samsung Semiconductor. These vulnerabilitiesSat, 18 Mar 2023 00:00:00 GMT0-day vulnerabilitiesbaseband remote code executionExynos Auto T5123Exynos ModemGooglemobile devicespatch timelinesPixelSamsung SemiconductorVivoVoLTEWi-Fi callingDimitris Gkoutzamanishttps://cisotimes.com/urgent-warning-act-now-to-patch-newly-discovered-zero-day-vulnerability-in-microsoft-outlook/https://cisotimes.com/urgent-warning-act-now-to-patch-newly-discovered-zero-day-vulnerability-in-microsoft-outlook/Microsoft Outlook, the popular email client, is in the news again, but not for good reasons. Security researchers have identified a zero-day vulnerability inSat, 18 Mar 2023 00:00:00 GMTMicrosoftOutlookPatchingZero-DayDimitris Gkoutzamanishttps://cisotimes.com/top-challenges-financial-services-cisos-will-face-this-year/https://cisotimes.com/top-challenges-financial-services-cisos-will-face-this-year/In the current uncertain economic climate, many leaders are being asked to cut costs, and despite rising corporate concerns regarding cybersecurity, ChiefFri, 17 Mar 2023 00:00:00 GMTTheCISOhttps://cisotimes.com/beware-of-dos-attacks-on-cisco-routers-cisco-releases-critical-security-updates/https://cisotimes.com/beware-of-dos-attacks-on-cisco-routers-cisco-releases-critical-security-updates/Cisco has released critical security updates to address a high-severity DoS (Denial of Service) vulnerability that affects its IOS XR software. ThisSun, 12 Mar 2023 00:00:00 GMTASR 9000 SeriesASR 9902ASR 9903BFD hardware offloadCiscoCisco routersDenial of ServiceDoS attacksIOS XR softwareSecurity UpdatesVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/empowering-cybersecurity-biden-administrations-national-cybersecurity-strategy/https://cisotimes.com/empowering-cybersecurity-biden-administrations-national-cybersecurity-strategy/On March 2, 2023, the Biden Administration released its National Cybersecurity Strategy, which aims to address the growing cybersecurity concerns in theSun, 12 Mar 2023 00:00:00 GMTBiden AdministrationCybersecurityfederal contractorsindustryliabilityNational Cybersecurity StrategyPersonal Dataregulationssoftware producerszero trust architectureTheCISOhttps://cisotimes.com/protecting-your-investments-opensea-nft-marketplace-vulnerability-and-the-importance-of-nft-security/https://cisotimes.com/protecting-your-investments-opensea-nft-marketplace-vulnerability-and-the-importance-of-nft-security/The OpenSea NFT marketplace is one of the largest platforms for buying and selling non-fungible tokens (NFTs) - unique digital assets that are verified on theSun, 12 Mar 2023 00:00:00 GMTblockchainCybersecurityFraudNFTOpenSeasecurity measuresDimitris Gkoutzamanishttps://cisotimes.com/acronis-suffers-cyber-attack-but-only-one-customer-account-affected/https://cisotimes.com/acronis-suffers-cyber-attack-but-only-one-customer-account-affected/Acronis, a leading Swiss data protection firm, recently suffered a cyber attack that caused quite a stir in the tech industry. A hacker claiming to be boredSat, 11 Mar 2023 00:00:00 GMTAcronisCyber AttacksCybersecurityData BreachData ProtectionDimitris Gkoutzamanishttps://cisotimes.com/malware-uses-ai-to-avoid-detection/https://cisotimes.com/malware-uses-ai-to-avoid-detection/With the rise of artificial intelligence (AI), cybercriminals have been developing new exploits that can evade even the most sophisticated cybersecuritySat, 11 Mar 2023 00:00:00 GMTAIBlackMambaChatGPTCybersecurityMalwareOpenAIpolymorphic malwareDimitris Gkoutzamanishttps://cisotimes.com/massive-data-breach-at-att-9-million-wireless-customers-account-details-compromised/https://cisotimes.com/massive-data-breach-at-att-9-million-wireless-customers-account-details-compromised/Telecommunications giant AT&T has confirmed that nearly nine million of its wireless customers' account details were accessed by unauthorized individualsSat, 11 Mar 2023 00:00:00 GMTAT&TCustomer DataCybersecurityData Breachvendor network breachDimitris Gkoutzamanishttps://cisotimes.com/playing-with-fire-why-tiktok-is-a-loaded-gun-for-americas-youth/https://cisotimes.com/playing-with-fire-why-tiktok-is-a-loaded-gun-for-americas-youth/TikTok is an immensely popular social media platform that allows users to create, share, and discover short video clips. However, General Paul Nakasone,Sat, 11 Mar 2023 00:00:00 GMTbanCCPespionagefederal devicesinfluence operationsnational securityTikTokUS governmentyoung AmericansTheCISOhttps://cisotimes.com/powerful-prometei-botnet-infects-10000-systems-worldwide/https://cisotimes.com/powerful-prometei-botnet-infects-10000-systems-worldwide/The digital world is constantly evolving, and unfortunately, so are the cyber threats that come with it. One such threat is the Prometei botnet malware, whichSat, 11 Mar 2023 00:00:00 GMTCryptocurrencyCyber AttacksCyber ThreatsCybersecurityMalwarePrometei botnetDimitris Gkoutzamanishttps://cisotimes.com/powering-up-cyber-resilience-ecb-to-launch-simulated-attacks-on-major-banks/https://cisotimes.com/powering-up-cyber-resilience-ecb-to-launch-simulated-attacks-on-major-banks/In response to the surge of cyber attacks on banks and financial institutions in Europe, the European Central Bank (ECB) is taking a proactive approach toSat, 11 Mar 2023 00:00:00 GMTBanksCyber ResilienceCyber WarDefense MechanismsDigital AttacksECBIT InfrastructureRussiaSimulated AttacksThematic Stress TestsUkraineVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/protect-yourself-from-bitwardens-risky-autofill-feature/https://cisotimes.com/protect-yourself-from-bitwardens-risky-autofill-feature/Bitwarden, a popular open-source password management service, has a potentially dangerous security flaw that could allow threat actors to steal loginSat, 11 Mar 2023 00:00:00 GMTautofillBitwardeniframelogin credentialspassword managementsecurity flawDimitris Gkoutzamanishttps://cisotimes.com/update-android-latest-android-security-updates/https://cisotimes.com/update-android-latest-android-security-updates/If you're an Android user, there's some important news you need to be aware of. The March 2023 Android Security Bulletin contains crucial information aboutSat, 11 Mar 2023 00:00:00 GMTAndroidBuffer OverflowKernelMemory CorruptionPPPRemote Code ExecutionCybersecurityUpdatesVulnerabilityTheCISOhttps://cisotimes.com/whats-lacking-in-traditional-vulnerability-management-a-comprehensive-look/https://cisotimes.com/whats-lacking-in-traditional-vulnerability-management-a-comprehensive-look/Traditional vulnerability management approaches have limitations that put businesses at risk. Adopting a comprehensive and proactive approach to vulnerabilitySat, 11 Mar 2023 00:00:00 GMTAutomationcontinuous monitoringCybersecurityNetwork Securityrisk mitigationThreat Detectionvulnerability managementDimitris Gkoutzamanishttps://cisotimes.com/crushing-the-doppelpaymer-ransomware-gang-joint-operation-results-in-arrests/https://cisotimes.com/crushing-the-doppelpaymer-ransomware-gang-joint-operation-results-in-arrests/Core members of the DoppelPaymer ransomware gang were apprehended in a joint operation by the Ukrainian National Police and the German Regional Police, withTue, 07 Mar 2023 00:00:00 GMTCybercrimeCybersecurityDoppelPaymer ransomwareinternational law enforcementRansomwareRansomware AttackTheCISOhttps://cisotimes.com/firewall-optimization-enhancing-network-security-and-performance/https://cisotimes.com/firewall-optimization-enhancing-network-security-and-performance/Firewall optimization is a critical process for organizations seeking to enhance their network security and performance. This article explores the benefits ofMon, 06 Mar 2023 00:00:00 GMTalertingasset discoveryComplianceconfiguration analysiscost savingsfirewall analyzerfirewall managementfirewall optimizationintrusion detection systemslog analysisMonitoringmulti-vendor supportNetwork Securityperformancepolicy managementsecurity analyticsvulnerability scannersDimitris Gkoutzamanishttps://cisotimes.com/vulnerability-in-u-s-quantum-resistant-encryption-algorithm/https://cisotimes.com/vulnerability-in-u-s-quantum-resistant-encryption-algorithm/A team of researchers from the KTH Royal Institute of Technology has uncovered a vulnerability in one of the encryption algorithms selected by the U.S.Mon, 06 Mar 2023 00:00:00 GMTCRYSTALS-KyberCybersecurityEncryptionmaskingNISTquantum-resistantside-channel attackDimitris Gkoutzamanishttps://cisotimes.com/why-combining-infosec-with-it-is-a-recipe-for-disaster-the-case-for-separation/https://cisotimes.com/why-combining-infosec-with-it-is-a-recipe-for-disaster-the-case-for-separation/Before we delve into why separating infosec from IT is important, it's essential to understand the difference between the two.Sun, 05 Mar 2023 00:00:00 GMTCybersecurityData SecurityefficiencyinfosecITorganizational securitysecurity vulnerabilitiesstaff responsibilitiestechnology infrastructureDimitris Gkoutzamanishttps://cisotimes.com/hatch-bank-suffers-data-breach-another-supply-chain-attack/https://cisotimes.com/hatch-bank-suffers-data-breach-another-supply-chain-attack/Hatch Bank has become the latest company to suffer the consequences of a data breach caused by a supply chain attack. The incident was a result of aSat, 04 Mar 2023 00:00:00 GMTClop ransomwareCustomer DataCybersecurityData BreachFortraGoAnywhere MFTHatch Banksupply chain attackZero-DayDimitris Gkoutzamanishttps://cisotimes.com/pierce-transit-falls-victim-to-lockbit-ransomware-attack/https://cisotimes.com/pierce-transit-falls-victim-to-lockbit-ransomware-attack/The Pierce County Public Transportation Benefit Area Corporation (Pierce Transit), a public transit operator in Washington state, has recently become a victimSat, 04 Mar 2023 00:00:00 GMTCyber AttacksCybersecurityData BreachLockBitPierce TransitPublic TransitRansomwareRansomware-as-a-ServiceWashington StateTheCISOhttps://cisotimes.com/royal-ransomware-group-an-overview-of-tactics-techniques-and-procedures/https://cisotimes.com/royal-ransomware-group-an-overview-of-tactics-techniques-and-procedures/The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) have recently released a cybersecurity advisory as partSat, 04 Mar 2023 00:00:00 GMTCybersecurityCybersecurity and Infrastructure Security AgencyFederal Bureau of InvestigationmalvertisingPhishingRansomwareRoyal RansomwareDimitris Gkoutzamanishttps://cisotimes.com/dish-network-confirms-ransomware-attack-and-data-breach/https://cisotimes.com/dish-network-confirms-ransomware-attack-and-data-breach/Dish Network, the American satellite broadcast provider, has recently admitted that the outage that occurred on February 24, 2023, was caused by a ransomwareWed, 01 Mar 2023 00:00:00 GMTBlack Basta ransomwareCybersecurityData BreachDish NetworkNetwork infrastructureRansomware AttackDimitris Gkoutzamanishttps://cisotimes.com/malware-alert-law-firms-targeted-by-gootloader-and-socgholish/https://cisotimes.com/malware-alert-law-firms-targeted-by-gootloader-and-socgholish/In January and February 2023, six different law firms were attacked by two distinct threat campaigns, which unleashed GootLoader and FakeUpdates (akaWed, 01 Mar 2023 00:00:00 GMTbrowser-based attacksCybersecuritycybersecurity threatsespionage operationsGootLoaderlaw firmslegal professionalsmalware attacksRansomwareSEO poisoningSocGholishthreat campaignswebsite compromiseDimitris Gkoutzamanishttps://cisotimes.com/dole-food-company-hit-by-ransomware-attack-temporarily-halts-operations/https://cisotimes.com/dole-food-company-hit-by-ransomware-attack-temporarily-halts-operations/Dole Food Company, one of the largest fruit and vegetable producers in the world, has recently disclosed that it was hit by a ransomware attack that caused aMon, 27 Feb 2023 00:00:00 GMTCrisis ManagementCybersecurityData BreachDole Food CompanyFood ProductionGrocery StoresNew MexicoRansomware AttackSupply ChainTexasThird-Party Cybersecurity ExpertsDimitris Gkoutzamanishttps://cisotimes.com/new-wave-of-plugx-rat-attacks-masquerading-as-windows-debugger-tool/https://cisotimes.com/new-wave-of-plugx-rat-attacks-masquerading-as-windows-debugger-tool/Cybersecurity experts have identified a new wave of attacks aimed at distributing the PlugX remote access trojan. In this campaign, the trojan is disguised asMon, 27 Feb 2023 00:00:00 GMTattack techniquescybersecurity threatsDLL side-loadingindicators of compromise (IoCs)MalwarepersistencePlugX RATremote access trojanWindows debugger toolx32dbgDimitris Gkoutzamanishttps://cisotimes.com/rancho-mesquite-casino-data-breach-lawsuit/https://cisotimes.com/rancho-mesquite-casino-data-breach-lawsuit/A class-action lawsuit filed on Wednesday alleges that Rancho Mesquite Casino's computer systems were left vulnerable to a cyberattack, leaving the personalSat, 25 Feb 2023 00:00:00 GMTTheCISOhttps://cisotimes.com/russian-national-accused-of-creating-nlbrute-hacking-tool-faces-criminal-charges-in-the-us/https://cisotimes.com/russian-national-accused-of-creating-nlbrute-hacking-tool-faces-criminal-charges-in-the-us/NLBrute, a brute-force hacking tool created by a Russian national, and the criminal charges he faces in the US.Sat, 25 Feb 2023 00:00:00 GMTbrute-force attackscriminal chargesCybercrimeCybersecurityDariy PankovHackingNLBruteRDPTwo-Factor AuthenticationUS Department of JusticeTheCISOhttps://cisotimes.com/two-radio-stations-in-crimea-hacked-with-a-message-from-ukraine/https://cisotimes.com/two-radio-stations-in-crimea-hacked-with-a-message-from-ukraine/On the eve of the anniversary of Vladimir Putin's 2014 invasion, two radio stations in Crimea were hacked with a message from Ukraine. The message includedSat, 25 Feb 2023 00:00:00 GMTTheCISOhttps://cisotimes.com/website-spoofing-understanding-the-risks-and-how-to-protect-your-business/https://cisotimes.com/website-spoofing-understanding-the-risks-and-how-to-protect-your-business/Protect your business and customers from the risks of website spoofing. Learn about prevention measures and tools to safeguard against this serious threat.Sat, 25 Feb 2023 00:00:00 GMTCyber AttacksCybercrimeCybersecurityData Protectiondigital risk protectioninternet securityMalwareonline fraudPhishingwebsite spoofingDimitris Gkoutzamanishttps://cisotimes.com/lazarus-group-unleashes-new-backdoor-malware-through-wslink-downloader/https://cisotimes.com/lazarus-group-unleashes-new-backdoor-malware-through-wslink-downloader/A new backdoor linked to the notorious North Korea-aligned Lazarus Group has been discovered by researchers.Thu, 23 Feb 2023 00:00:00 GMTadvanced persistent threatBackdoorCyber AttacksCybersecurityHacking Toolslateral movementLazarus GroupMalwareWinorDLL64Wslink malware downloaderDimitris Gkoutzamanishttps://cisotimes.com/new-ransomware-strain-nevada-group-targets-thousands-of-victims-in-the-us-and-europe/https://cisotimes.com/new-ransomware-strain-nevada-group-targets-thousands-of-victims-in-the-us-and-europe/A new variant of ransomware, known as "Nevada Group," has recently emerged, targeting over 5,000 victims in the US and Europe. Security researchers haveThu, 23 Feb 2023 00:00:00 GMTCISACyber AttacksCybersecurityFBIIBMMalwareNevada GroupRansomwareTrend MicroDimitris Gkoutzamanishttps://cisotimes.com/major-victory-against-cybercrime-norwegian-police-seize-5-84-million-worth-of-cryptocurrency-stolen-by-lazarus-group/https://cisotimes.com/major-victory-against-cybercrime-norwegian-police-seize-5-84-million-worth-of-cryptocurrency-stolen-by-lazarus-group/Norwegian police agency Økokrim has made a major breakthrough in the fight against cybercrime, announcing the seizure of $5.84 million worth of cryptocurrency stolen by the notorious Lazarus GroupMon, 20 Feb 2023 00:00:00 GMTBlockchain analyticsCryptocurrency theftCybercrimeCybersecurityLazarus Groupmoney launderingØkokrimRansomwareTheCISOhttps://cisotimes.com/critical-flaw-in-clamav-discovered-and-patched/https://cisotimes.com/critical-flaw-in-clamav-discovered-and-patched/Cisco has released critical security updates for the critical flaw in ClamAVFri, 17 Feb 2023 00:00:00 GMTCiscoClamAVCVECVSSVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/haproxy-vulnerability-exposes-your-backend/https://cisotimes.com/haproxy-vulnerability-exposes-your-backend/Protect your web infrastructure from the HAProxy vulnerability and learn how to safeguard your backend servers from attackers.Fri, 17 Feb 2023 00:00:00 GMTbug fixCyber Attackscyber securitydropped headersHAProxy vulnerabilityHTTP request smugglingload balancerreverse proxyweb application securityweb infrastructureDimitris Gkoutzamanishttps://cisotimes.com/how-the-devastating-ransomware-attack-in-oakland-brought-the-city-to-its-knees/https://cisotimes.com/how-the-devastating-ransomware-attack-in-oakland-brought-the-city-to-its-knees/The ransomware attack that struck Oakland on February 8, 2023, has had severe consequences for the city's services. The attack forced the City's InformationFri, 17 Feb 2023 00:00:00 GMTalternate reportingcity servicesCritical InfrastructureCyber Attackscyber securityemergency workersHackersinvestigationIT departmentlaw enforcementnon-emergency systemsOaklandprocurementRansomwareresponse timesrestorationstate of emergencytechnologyTheCISOhttps://cisotimes.com/shocking-statistics-50-million-americans-impacted-by-data-breaches-in-2022/https://cisotimes.com/shocking-statistics-50-million-americans-impacted-by-data-breaches-in-2022/Nearly 50 million Americans were impacted by these breaches in 2022 alone.Thu, 16 Feb 2023 00:00:00 GMTDimitris Gkoutzamanishttps://cisotimes.com/cloudflare-mitigates-largest-http-ddos-attack-on-record/https://cisotimes.com/cloudflare-mitigates-largest-http-ddos-attack-on-record/Cloudflare mitigated the largest HTTP DDoS attack on record, originating from over 30,000 IP addresses and targeting various industries. Learn how the threat of DDoS attacks is growing and what businesses can do to protect themselves.Wed, 15 Feb 2023 00:00:00 GMTBotnetCloudflarecyber securitycyber threatDDoS Attackdistributed denial-of-service attackHTTP DDoS attackransom DDoS attackvolumetric attackDimitris Gkoutzamanishttps://cisotimes.com/ecommerce-security-accidental-data-leaks-put-online-stores-at-risk/https://cisotimes.com/ecommerce-security-accidental-data-leaks-put-online-stores-at-risk/Sansec's study of 2,037 online stores found 12.3% exposing compressed files containing sensitive data. Threat actors exploit this flaw, and Sansec urges store owners to take immediate action to prevent data leaks.Wed, 15 Feb 2023 00:00:00 GMTBackup FilesData ExposureData LeakseCommerceMalware ScannerOnline StoresSansecCybersecuritySensitive DataThreat ActorsTwo-Factor Authentication (2FA)Dimitris Gkoutzamanishttps://cisotimes.com/microsoft-releases-security-updates-to-address-75-vulnerabilities-including-3-zero-days/https://cisotimes.com/microsoft-releases-security-updates-to-address-75-vulnerabilities-including-3-zero-days/Microsoft has released security updates to address 75 vulnerabilities, including 3 zero-day vulnerabilities actively exploited in the wild.Wed, 15 Feb 2023 00:00:00 GMTCybersecurityMicrosoftRemote Code ExecutionSecurity Updatessystem privilegeszero-day vulnerabilitiesDimitris Gkoutzamanishttps://cisotimes.com/new-variant-of-esxiargs-ransomware-cannot-be-decrypted-with-recovery-script/https://cisotimes.com/new-variant-of-esxiargs-ransomware-cannot-be-decrypted-with-recovery-script/A new variant of ESXiArgs ransomware uses an updated encryption routine that cannot be decrypted with the recovery script released by CISA.Wed, 15 Feb 2023 00:00:00 GMTCISACVE-2021-21974CVE-2022-31696CVE-2022-31697CVE-2022-31698CVE-2022-31699Cybersecurityencryption routineESXiArgsFBIRansomwarerecovery scriptSLPTOXDimitris Gkoutzamanishttps://cisotimes.com/noc-vs-soc-understanding-the-differences/https://cisotimes.com/noc-vs-soc-understanding-the-differences/Learn the differences between a Network Operations Center (NOC) and a Security Operations Center (SOC) in the roles, responsibilities, and functions of each center.Wed, 15 Feb 2023 00:00:00 GMTCybersecuritynetwork performanceNetwork SecurityNOCsecurity incidentsSOCDimitris Gkoutzamanishttps://cisotimes.com/namecheap-email-account-breached-leading-to-flood-of-phishing-emails/https://cisotimes.com/namecheap-email-account-breached-leading-to-flood-of-phishing-emails/Namecheap's email account was breached, resulting in a flood of phishing emails. The incident underscores the ongoing threat of phishing attacks and the importance of robust security measures.Tue, 14 Feb 2023 00:00:00 GMTCyber ThreatsPrivacyemail breachNamecheapOnline Securityphishing attacksDimitris Gkoutzamanishttps://cisotimes.com/russian-hacktivist-group-killnet-targets-nato-in-ddos-attacks/https://cisotimes.com/russian-hacktivist-group-killnet-targets-nato-in-ddos-attacks/Killnet, a Russian hacktivist group, has targeted NATO in a series of DDoS attacks causing temporary disruption. Learn about the attack and NATO's response in this articleMon, 13 Feb 2023 00:00:00 GMTCybersecurityDDoS attacksKillnetNATORussiaDimitris Gkoutzamanishttps://cisotimes.com/securityscorecard-publishes-list-of-proxy-ips-to-block-killnet-ddos-bot/https://cisotimes.com/securityscorecard-publishes-list-of-proxy-ips-to-block-killnet-ddos-bot/Pro-Russia hacking group, Killnet, and their recent attacks on hospitals and critical infrastructure. Learn how SecurityScorecard is helping to prevent these attacks.Thu, 09 Feb 2023 00:00:00 GMTCritical InfrastructureDDoS attacksHacking GroupHospitalsKillnetPro-RussiaSecurityScorecardDimitris Gkoutzamanishttps://cisotimes.com/russian-hacker-pleads-guilty-to-laundering-over-150-million-in-ryuk-ransomware-attacks/https://cisotimes.com/russian-hacker-pleads-guilty-to-laundering-over-150-million-in-ryuk-ransomware-attacks/Denis Mihaqlovic Dubnikov, a Russian national, recently pleaded guilty in a US court to money laundering and concealing the source of funds obtained in connection with Ryuk ransomware attacks. Learn more about his involvement in cryptocurrency and the estimated $150 million in laundered funds.Wed, 08 Feb 2023 00:00:00 GMTCryptocurrencyEggchangeFederation Tower EastHackingmoney launderingRansomwareRyuk ransomwareTheCISOhttps://cisotimes.com/pixpirate-malware-stealing-banking-passwords/https://cisotimes.com/pixpirate-malware-stealing-banking-passwords/PixPirate, the new strain of mobile malware targeting the Pix instant payment platform in Brazil. Learn about the dangers and steps you can take to protect yourselfTue, 07 Feb 2023 00:00:00 GMTBrazilCentral Bank of Brazilinstant payment platformmobile malwarePixPirateDimitris Gkoutzamanishttps://cisotimes.com/toyota-supplier-management-network-hacked/https://cisotimes.com/toyota-supplier-management-network-hacked/A security researcher, Eaton Zveare, discovered a vulnerability in Toyota's Global Supplier Preparation Information Management System (GSPIMS) and was able to access sensitive data of thousands of suppliers and users worldwide. Toyota quickly addressed the issue and fixed the vulnerability.Tue, 07 Feb 2023 00:00:00 GMTData BreachEaton Zvearesecurity vulnerabilitysupplier management networkToyotaTheCISOhttps://cisotimes.com/malvirt-loaders-and-formbook-a-new-threat-to-cybersecurity/https://cisotimes.com/malvirt-loaders-and-formbook-a-new-threat-to-cybersecurity/Formbook family of malware spread via MalVirt loaders through malvertising attacks.Mon, 06 Feb 2023 00:00:00 GMTanti-analysisanti-detectionFormbook familymalvertisingMalVirtMalwareSentinelLabsvirtualizationTheCISOhttps://cisotimes.com/massive-ransomware-campaign-targeting-vmware-esxi-servers-worldwide/https://cisotimes.com/massive-ransomware-campaign-targeting-vmware-esxi-servers-worldwide/The Italian National Cybersecurity Agency and the France CERT have issued an alert about an ongoing ransomware campaign targeting VMware ESXi servers worldwide. Organizations are urged to apply security patches and prevent exploitation of the CVE-2021-21974 vulnerabilityMon, 06 Feb 2023 00:00:00 GMTCyber AttacksCybersecurityESXi serversRansomwareVMwareVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/openais-ai-text-classifier-to-detect-ai-generated-text/https://cisotimes.com/openais-ai-text-classifier-to-detect-ai-generated-text/OpenAI has recently announced the release of AI Text Classifier, an AI-text detection tool designed to help users detect AI-generated texts with 26% precision. Read on to know more about the tool and its limitationsMon, 06 Feb 2023 00:00:00 GMTAI Text ClassifierAI-generated textChatGPTOpenAIprecisionDimitris Gkoutzamanishttps://cisotimes.com/openssh-version-9-2-addresses-security-bugs/https://cisotimes.com/openssh-version-9-2-addresses-security-bugs/The maintainers of OpenSSH have released version 9.2 to address a pre-authentication double free vulnerability in the OpenSSH server (sshd). Learn about the vulnerability, its potential impact, and how to protect yourselfMon, 06 Feb 2023 00:00:00 GMTdouble freememory safetyOpenSSHpre-authenticationsecure shellSecurity Updatessecurity vulnerabilityssh protocolTheCISOhttps://cisotimes.com/headcrab-malware-threatens-redis-servers/https://cisotimes.com/headcrab-malware-threatens-redis-servers/Protect your Redis server from the fast-spreading HeadCrab malware. Learn about the malicious botnet network, its annual profit, and how to secure your environment.Sun, 05 Feb 2023 00:00:00 GMTbotnet networkcryptocurrency miningHeadCrab malwareMalwareRedis server securitysecurity best practicesserver protectionTheCISOhttps://cisotimes.com/vmware-fixes-high-severity-privilege-escalation-flaw-in-workstation/https://cisotimes.com/vmware-fixes-high-severity-privilege-escalation-flaw-in-workstation/VMware has fixed a high-severity privilege escalation flaw in Workstation that allows attackers to delete arbitrary files. The issue was reported by Cirosec and updates are available to remedy the vulnerability.Sun, 05 Feb 2023 00:00:00 GMTarbitrary file deletionprivilege escalationSecurity UpdatesVMwareVulnerabilityWorkstationTheCISOhttps://cisotimes.com/critical-vulnerability-discovered-in-jira-service-management-server-and-data-center/https://cisotimes.com/critical-vulnerability-discovered-in-jira-service-management-server-and-data-center/Critical vulnerability (CVE-2023-22501) in Jira Service Management Server and Data Center, its impact, and how to fix it with the latest updates from Atlassian.Sat, 04 Feb 2023 00:00:00 GMTAtlassianCVE-2023-22501Data CenterData SecurityJiraprotectionCybersecurityService Management ServerupdateVulnerabilityTheCISOhttps://cisotimes.com/peopleconnect-confirms-data-breach-affecting-millions-of-truthfinder-and-instant-checkmate-customers/https://cisotimes.com/peopleconnect-confirms-data-breach-affecting-millions-of-truthfinder-and-instant-checkmate-customers/A recent data breach at PeopleConnect, the owners of TruthFinder and Instant Checkmate background check services. Over 20 million customer records were leaked in a 2019 backup database.Sat, 04 Feb 2023 00:00:00 GMTCustomer InformationCybersecurity.Data BreachInstant CheckmatePeopleConnectTruthFinderTheCISOhttps://cisotimes.com/tallahassee-memorial-healthcare-hospital-hit-by-cyberattack-it-systems-taken-offline/https://cisotimes.com/tallahassee-memorial-healthcare-hospital-hit-by-cyberattack-it-systems-taken-offline/Tallahassee Memorial HealthCare Hospital has suffered a cyberattack, forcing it to take its IT systems offline and cancel non-emergency procedures. Patients have been diverted to other hospitals, and the attack is being investigated as a potential ransomware attack. Get the latest updates on this…Sat, 04 Feb 2023 00:00:00 GMTCyber AttacksHospitalIT SystemsPatient ServicesRansomwareTallahassee Memorial HealthCareTheCISOhttps://cisotimes.com/vice-media-data-breach-exposes-personal-and-financial-information-of-over-1700-individuals/https://cisotimes.com/vice-media-data-breach-exposes-personal-and-financial-information-of-over-1700-individuals/Vice Media data breach of personal and financial information of over 1,700 individuals. Read on for details and remediation efforts.Sat, 04 Feb 2023 00:00:00 GMTCybersecurityData BreachEquifaxfinancial informationPersonal DataVice MediaTheCISOhttps://cisotimes.com/zero-day-vulnerability-found-in-fortras-goanywhere-mft/https://cisotimes.com/zero-day-vulnerability-found-in-fortras-goanywhere-mft/A zero-day vulnerability in Fortra's GoAnywhere MFT managed file transfer application is being actively exploited in the wild. Security researchers have warned of over 1,000 on-premise instances publicly accessible on the internet. No patch is currently available, but Fortra has released workarou…Sat, 04 Feb 2023 00:00:00 GMTCybersecuritydata theftExploitFortraGoAnywhere MFTremote code injectionZero-DayTheCISOhttps://cisotimes.com/binwalk-security-tool-vulnerable-to-path-traversal-attack/https://cisotimes.com/binwalk-security-tool-vulnerable-to-path-traversal-attack/A security vulnerability in Binwalk, a popular Linux command-line tool used for analyzing and extracting firmware images, could lead to remote code execution. The path traversal issue is caused by a failed attempt to mitigate risk in the Professional File System extractor plugin. The vulnerabilit…Fri, 03 Feb 2023 00:00:00 GMTBinwalkfirmware analysisLinuxpath traversalRemote Code Executionreverse engineeringCybersecurityTheCISOhttps://cisotimes.com/cyberattack-disrupts-ion-group-transactions/https://cisotimes.com/cyberattack-disrupts-ion-group-transactions/A subsidiary of the Dublin-based financial technology and trading firm ION Group, ION Cleared Derivatives, has been hit by a cyberattack that has disruptedFri, 03 Feb 2023 00:00:00 GMTCybersecurityHackingION GroupLockBitRansomwareTheCISOhttps://cisotimes.com/f5-big-ip-vulnerability-a-threat-to-system-stability/https://cisotimes.com/f5-big-ip-vulnerability-a-threat-to-system-stability/F5 has issued a warning about a high-severity format string vulnerability in BIG-IP. An authorized attacker may cause a denial-of-service or execute arbitrary code. Versions of BIG-IP from 13.1.5 to 17.0.0 are vulnerable. Protect your system by checking if your product is affected and using iHeal…Fri, 03 Feb 2023 00:00:00 GMTBIG-IPCWE-134Cybersecuritydenial-of-serviceexecute arbitrary codeF5format stringiHealthprotectionsystem securityVulnerabilityTheCISOhttps://cisotimes.com/the-future-of-encryption/https://cisotimes.com/the-future-of-encryption/Explore the potential of quantum-safe cryptography and quantum cryptography as enhanced solutions for secure communication and data protection. The article covers the technology behind these cryptographic methods, their potential for eliminating ransomware attacks, and their role in ensuring data…Thu, 02 Feb 2023 00:00:00 GMTAIArtificial IntelligenceCryptographyMachine LearningQuantum CryptographyNick Jankahttps://cisotimes.com/information-security-specialization-vs-generalization/https://cisotimes.com/information-security-specialization-vs-generalization/Explore the pros and cons of both information security specialization and generalization, so you can make an informed decision about what is suitable for your career.Sat, 28 Jan 2023 00:00:00 GMTCareerCareer DevelopmentCybersecurityDimitris Gkoutzamanishttps://cisotimes.com/why-use-a-penetration-testing-framework/https://cisotimes.com/why-use-a-penetration-testing-framework/Penetration testing is a crucial aspect of system security, but it's not always easy to know where to start or how to ensure that you're testing all the right areas.Thu, 26 Jan 2023 00:00:00 GMTFrameworksPenetration TestingDimitris Gkoutzamanishttps://cisotimes.com/the-colorful-teams-of-cybersecurity/https://cisotimes.com/the-colorful-teams-of-cybersecurity/What are all those colored security teams and all those colored hacker hats? What is the difference between them and why do we need them?Fri, 20 Jan 2023 00:00:00 GMTBlack HatBlue HatBlue TeamGreen HatHackingPenetration TestingPurple TeamRed HatRed TeamVulnerabilityWhite HatDimitris Gkoutzamanishttps://cisotimes.com/ai-in-information-security-real-world-examples-and-benefits/https://cisotimes.com/ai-in-information-security-real-world-examples-and-benefits/By leveraging the power of machine learning algorithms, businesses can gain valuable insights into potential security threats and take proactive measures to protect their sensitive data.Sun, 15 Jan 2023 00:00:00 GMTAIArtificial IntelligenceDarktraceIBMIncident ResponseMachine LearningDimitris Gkoutzamanishttps://cisotimes.com/is-penetration-testing-useful-for-your-organization/https://cisotimes.com/is-penetration-testing-useful-for-your-organization/Ask yourself the following questions before you even start thinking of executing a penetration test in your organization.Thu, 05 Jan 2023 00:00:00 GMTPenetration TestingSecurity ControlsDimitris Gkoutzamanishttps://cisotimes.com/a-simple-guide-to-secure-iot-devices/https://cisotimes.com/a-simple-guide-to-secure-iot-devices/IoT devices introduce new security risks, as these devices may be vulnerable to multiple cyber threats. This is a simple guide to secure your IoT devices.Fri, 16 Dec 2022 00:00:00 GMTDimitris Gkoutzamanishttps://cisotimes.com/top-qualities-of-a-successful-ciso/https://cisotimes.com/top-qualities-of-a-successful-ciso/The top qualities of a successful CISO to enable them to perform their roles and protect their organization's data and systems.Fri, 16 Dec 2022 00:00:00 GMTCISOSkillsDimitris Gkoutzamanishttps://cisotimes.com/top-tools-for-kubernetes-security/https://cisotimes.com/top-tools-for-kubernetes-security/Container technology has become increasingly popular but has also expanded your organization's attack surface. Here's how to secure it with free tools.Tue, 13 Dec 2022 00:00:00 GMTApplication SecurityContainersDockerDocker SecurityKubernetesMicroservicesDimitris Gkoutzamanishttps://cisotimes.com/understand-and-reduce-your-attack-surface/https://cisotimes.com/understand-and-reduce-your-attack-surface/Understand and reduce the possible entry points an attacker may try to exploit to gain access to systems and information.Tue, 13 Dec 2022 00:00:00 GMTAttack SurfaceAttack VectorData BreachHackingPhishingSecurity ControlsVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/apple-announces-new-security-features/https://cisotimes.com/apple-announces-new-security-features/Apple has announced the introduction of three new advanced security features focused on protecting against threats to user data in the cloud.Sun, 11 Dec 2022 00:00:00 GMTAppleApplication SecurityCloud SecurityiCloudiMessageTheCISOhttps://cisotimes.com/top-10-ci-cd-security-risks-guideline-from-owasp/https://cisotimes.com/top-10-ci-cd-security-risks-guideline-from-owasp/A list compiled on the basis of extensive research and analysis to help you protect your CI/CD ecosystem.Sat, 10 Dec 2022 00:00:00 GMTCI/CDContinuous DeliveryContinuous IntegrationOWASPDimitris Gkoutzamanishttps://cisotimes.com/what-is-the-difference-between-gwapt-and-oswe-penetration-testing-certifications/https://cisotimes.com/what-is-the-difference-between-gwapt-and-oswe-penetration-testing-certifications/GWAPT and OSWE are among the top certifications in security focused on penetration testers. Which would you choose to advance your career?Fri, 09 Dec 2022 00:00:00 GMTCertificationsGIACGWAPTHackingOffensive SecurityOSWEPenetration TestingTrainingWeb ApplicationDimitris Gkoutzamanishttps://cisotimes.com/rackspace-hosted-exchange-hit-by-ransomware/https://cisotimes.com/rackspace-hosted-exchange-hit-by-ransomware/Rackspace's hosted Microsoft Exchange environments were affected by a "security incident" which has knocked out email services to their customers.Tue, 06 Dec 2022 00:00:00 GMTHackingMicrosoft ExchangeRackspaceRansomwareDimitris Gkoutzamanishttps://cisotimes.com/most-organizations-still-vulnerable-to-the-log4j-vulnerability/https://cisotimes.com/most-organizations-still-vulnerable-to-the-log4j-vulnerability/According to the data collected from over 500 million tests, 72% of organizations remain vulnerable to the Log4Shell vulnerabilityThu, 01 Dec 2022 00:00:00 GMTApacheLo4jLog4ShellTenableVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/pentagon-supply-chain-fall-short-of-meeting-cybersecurity-requirements/https://cisotimes.com/pentagon-supply-chain-fall-short-of-meeting-cybersecurity-requirements/A recent independent study revealed that a shocking 87% of federal contractors fall short of meeting the DFARS requirements.Thu, 01 Dec 2022 00:00:00 GMTPentagonSupply ChainDimitris Gkoutzamanishttps://cisotimes.com/apt-group-targeting-governments-worldwide/https://cisotimes.com/apt-group-targeting-governments-worldwide/State-financed Chinese hackers have launched spear phishing campaigns to launch against international governments, academic, and research organizations.Sat, 26 Nov 2022 00:00:00 GMTEarth PretaEmail SecurityHackingMalwarePhishingSecurity AwarenessSpear PhishingTrend MicroDimitris Gkoutzamanishttps://cisotimes.com/whatsapp-data-breach-500-million-phone-numbers-on-sale/https://cisotimes.com/whatsapp-data-breach-500-million-phone-numbers-on-sale/A threat actor is claiming that is selling almost 500 million WhatsApp user phone numbers through a hacking community forum.Sat, 26 Nov 2022 00:00:00 GMTData BreachPersonal DataPhone NumbersWhatsAppDimitris Gkoutzamanishttps://cisotimes.com/interpol-seizes-over-129-million-and-arrests-almost-1000-suspects/https://cisotimes.com/interpol-seizes-over-129-million-and-arrests-almost-1000-suspects/In an operation lasting over five months, from the 28th of June to the 23rd of November, Interpol arrested almost 1000 suspects and seized 129 million.Fri, 25 Nov 2022 00:00:00 GMTCrimeCybercrimeInterpolTheCISOhttps://cisotimes.com/ok-google-patch-a-new-zero-day-vulnerability/https://cisotimes.com/ok-google-patch-a-new-zero-day-vulnerability/Yet another Chrome "zero-day" vulnerability was patched by Google, the 8th for 2022.Fri, 25 Nov 2022 00:00:00 GMTChromeExploitsGoogle ChromeVulnerabilityZero-DayDimitris Gkoutzamanishttps://cisotimes.com/pro-russian-group-attacked-the-eu-parliament-website/https://cisotimes.com/pro-russian-group-attacked-the-eu-parliament-website/The website of EUs Parliament was inaccessible for hours after a distributed denial-of-service (DDoS) attack by "Pro-Kremlin" attackers.Thu, 24 Nov 2022 00:00:00 GMTDDoSEURussiaTheCISOhttps://cisotimes.com/more-than-50-million-passwords-stolen-by-russian-cybercrime-groups/https://cisotimes.com/more-than-50-million-passwords-stolen-by-russian-cybercrime-groups/Russian-speaking groups distributing info-stealing malware under the stealer-as-a-service model infecting thousands of devices.Wed, 23 Nov 2022 00:00:00 GMTDimitris Gkoutzamanishttps://cisotimes.com/csrf-vulnerability-discovered-in-plesk-api/https://cisotimes.com/csrf-vulnerability-discovered-in-plesk-api/In Plesk versions starting from Plesk 17.8 attacker can execute commands and/or alter settings including the change of the admin's password.Sat, 12 Nov 2022 00:00:00 GMTCSRFExploitPleskVulnerabilityTheCISOhttps://cisotimes.com/google-pixel-phone-lock-bypass/https://cisotimes.com/google-pixel-phone-lock-bypass/The vulnerability could allow an attacker to bypass lock-screen protections such as fingerprint or PIN authentication and obtain physical access to a target device.Sat, 12 Nov 2022 00:00:00 GMTAndroidBugBug BountyGoogleGoogle PixelHackingPhoneVulnerabilityTheCISOhttps://cisotimes.com/what-is-a-vishing-attack/https://cisotimes.com/what-is-a-vishing-attack/Social engineering attacks use the "human loophole" to get around security controls. Instead of hacking your accounts to steal your identity, they hack you.Thu, 10 Nov 2022 00:00:00 GMTPhishingScamsSocial EngineeringVishingDimitris Gkoutzamanishttps://cisotimes.com/critical-vulnerabilities-affecting-citrix-gateway-and-adc/https://cisotimes.com/critical-vulnerabilities-affecting-citrix-gateway-and-adc/Critical vulnerabilities have been discovered in Citrix Gateway and Citrix ADC which can allow an attacker to gain unauthorized access, perform remote desktop takeover and bypass user login brute force protection.Wed, 09 Nov 2022 00:00:00 GMTCitrixCitrix ADCCitrix GatewayVulnerabilityTheCISOhttps://cisotimes.com/public-exploit-is-available-for-nsx-v-vmware-urges-customers-to-upgrade/https://cisotimes.com/public-exploit-is-available-for-nsx-v-vmware-urges-customers-to-upgrade/VMware warns that an exploit has been made publicly available, and urges its customers to upgrade to the latest release.Tue, 01 Nov 2022 00:00:00 GMTCVERemote Code ExecutionVMwareVulnerabilityTheCISOhttps://cisotimes.com/security-professionals-beware-of-fake-pocs/https://cisotimes.com/security-professionals-beware-of-fake-pocs/Researchers showed that fake Proof-of-Concepts (PoC) are targeting the security community, trying to plant malware and open backdoors to systems.Mon, 31 Oct 2022 00:00:00 GMTBackdoorExploitHackingMalwarePenetration TestingPoCProof of ConceptRed TeamResearchDimitris Gkoutzamanishttps://cisotimes.com/why-is-database-encryption-important/https://cisotimes.com/why-is-database-encryption-important/Why is database encryption so important? How does database encryption benefits your business, your users and customers?Sat, 29 Oct 2022 00:00:00 GMTAES-256Data at RestData BreachData EncryptionDatabasesEncryptionEncryption-At-RestPCIPersonal DataRSA 2048Dimitris Gkoutzamanishttps://cisotimes.com/cybercrime-face-the-facts/https://cisotimes.com/cybercrime-face-the-facts/You need to face the hard facts of Cybercrime, head-on and adopt an effective approach to secure your organization.Fri, 28 Oct 2022 00:00:00 GMTCybersecurityData BreachGovernanceHackingMFAVulnerabilityZero TrustVassilis Ioannidishttps://cisotimes.com/apple-patches-its-ninth-vulnerability-for-this-year/https://cisotimes.com/apple-patches-its-ninth-vulnerability-for-this-year/Since the start of 2022, Apple has addressed nine vulnerabilities with the latest one affecting iOS and iPad OS.Tue, 25 Oct 2022 00:00:00 GMTAppleiOSiPadiPhonePatchingVulnerabilityTheCISOhttps://cisotimes.com/how-to-detect-and-fix-the-text4shell-vulnerability/https://cisotimes.com/how-to-detect-and-fix-the-text4shell-vulnerability/Similar to the Spring4Shell and Log4Shell vulnerabilities, Text4Shell is a new vulnerability in the Apache Commons Text library.Mon, 24 Oct 2022 00:00:00 GMTApacheDockerLog4ShellText4ShellVulnerabilityTheCISOhttps://cisotimes.com/best-information-security-books/https://cisotimes.com/best-information-security-books/The best books in information security to help you strengthen your knowledge in the field and progress your career.Fri, 14 Oct 2022 00:00:00 GMTBooksCybersecurityHackingPenetration TestingDimitris Gkoutzamanishttps://cisotimes.com/steps-to-a-secure-portfolio-due-diligence-during-ma-beyond/https://cisotimes.com/steps-to-a-secure-portfolio-due-diligence-during-ma-beyond/How due diligence on information security during mergers and acquisitions can fortify the organization's information security strategy across its portfolios.Tue, 11 Oct 2022 00:00:00 GMTData BreachDue DiligenceMergers and AcquisitionsRisk AssessmentGina Yaconehttps://cisotimes.com/how-to-get-cybersecurity-experience-as-a-beginner/https://cisotimes.com/how-to-get-cybersecurity-experience-as-a-beginner/Cybersecurity is one of the most important aspects of business today. You want to get a job in the field but don't have any cybersecurity experience.Sat, 08 Oct 2022 00:00:00 GMTBashCertificationsCISGNS3LinkedInPenetration TestingPowerShellPythonRaspberry PiScriptingSecurity HardeningTwitterVirtualBoxDimitris Gkoutzamanishttps://cisotimes.com/free-information-security-courses/https://cisotimes.com/free-information-security-courses/Learning is a choice, you just pay in time and effort instead of money. Dive into free information security courses.Thu, 29 Sep 2022 00:00:00 GMTCybersecurityLearningOnline CoursesUniversityTheCISOhttps://cisotimes.com/why-you-should-choose-a-career-in-cybersecurity/https://cisotimes.com/why-you-should-choose-a-career-in-cybersecurity/There are many reasons why, but here are the key benefits that will explain why you should choose a career in cybersecurity.Wed, 28 Sep 2022 00:00:00 GMTCybersecurityJobsDimitris Gkoutzamanishttps://cisotimes.com/flaws-in-legacy-systems-byod-and-remote-access-how-they-impact-operations-security-of-the-enterprise/https://cisotimes.com/flaws-in-legacy-systems-byod-and-remote-access-how-they-impact-operations-security-of-the-enterprise/How flaws in legacy systems, BYOD practices and remote access impact operations security of the Enterprise.Sun, 25 Sep 2022 00:00:00 GMTBYODRemote AccessRemote WorkingSoftware PatchingVPNVulnerabilityDr. Daniel Harrisonhttps://cisotimes.com/is-there-a-difference-between-cybersecurity-and-information-security/https://cisotimes.com/is-there-a-difference-between-cybersecurity-and-information-security/Cybersecurity and Information Security are not the same thing, even though the terms have been used interchangeably. Which are the key differences?Thu, 22 Sep 2022 00:00:00 GMTCybersecurityDimitris Gkoutzamanishttps://cisotimes.com/your-companys-strongest-assets-are-its-weakest-links/https://cisotimes.com/your-companys-strongest-assets-are-its-weakest-links/Why building and maintaining a cybersecurity-aware culture should be your top strategic priority.Sat, 17 Sep 2022 00:00:00 GMTCybersecurityData BreachIBMPhishingStrategyTessianUberVerizonNick Jankahttps://cisotimes.com/instagram-fined-400m-for-abuse-of-childrens-data/https://cisotimes.com/instagram-fined-400m-for-abuse-of-childrens-data/Ireland's data privacy regulator has agreed to impose a record fine of $402M against Instagram following an investigation into its handling of children's data.Sun, 11 Sep 2022 00:00:00 GMTData ProtectionDPCGDPRPersonal DataTheCISOhttps://cisotimes.com/cool-tools-and-accessories-for-your-hacking-bag/https://cisotimes.com/cool-tools-and-accessories-for-your-hacking-bag/Have your hacking bag ready for your penetration tests and red team exercises with these tools and accessories.Thu, 08 Sep 2022 00:00:00 GMT2FAAnti-Spy DetectorData EraserDigisparkHackingHacking ToolsMFAPenetration TestingRaspberry PiRubber DuckySecure DeletionDimitris Gkoutzamanishttps://cisotimes.com/customer-data-leaked-in-a-newly-disclosed-samsung-breach/https://cisotimes.com/customer-data-leaked-in-a-newly-disclosed-samsung-breach/Samsung said that hackers have obtained some customer data in a newly disclosed breach.Sat, 03 Sep 2022 00:00:00 GMTCustomer DataData LeakHackingPersonal DataSamsungTheCISOhttps://cisotimes.com/new-watchguard-vulnerabilities-could-lead-to-appliance-takeover/https://cisotimes.com/new-watchguard-vulnerabilities-could-lead-to-appliance-takeover/Ambisonics security engineer Charles Fol has discovered 5 vulnerabilities and built 8 exploits to gain root privileges on every WatchGuard Firebox/XTM appliance.Sat, 03 Sep 2022 00:00:00 GMTCVEExploitsFirewallVulnerabilityWatchGuardDimitris Gkoutzamanishttps://cisotimes.com/why-you-should-not-get-into-cybersecurity/https://cisotimes.com/why-you-should-not-get-into-cybersecurity/If you're interested in cybersecurity, you should know that it's not all sunshine and rainbows. The field is growing rapidly, but it is also highly competitive.Thu, 01 Sep 2022 00:00:00 GMTCybersecurityJobsDimitris Gkoutzamanishttps://cisotimes.com/cybersecurity-analyst-interview-questions/https://cisotimes.com/cybersecurity-analyst-interview-questions/The questions serve as a starting point for you to practice for your interview and find any gaps in your knowledge that you must fill.Mon, 29 Aug 2022 00:00:00 GMTApplication SecurityCryptographyCybersecurityCybersecurity AnalystJob InterviewNetwork SecurityDimitris Gkoutzamanishttps://cisotimes.com/critical-vulnerability-discovered-in-bitbucket-server-and-data-center/https://cisotimes.com/critical-vulnerability-discovered-in-bitbucket-server-and-data-center/This vulnerability could allow remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request.Sat, 27 Aug 2022 00:00:00 GMTBitbucketCloudCommand InjectionCVEVulnerabilityTheCISOhttps://cisotimes.com/black-hat-usa-2022-are-cybersecurity-tool-standards-on-the-way/https://cisotimes.com/black-hat-usa-2022-are-cybersecurity-tool-standards-on-the-way/One of the biggest challenges cybersecurity teams face is to integrate data from the various tools they use to protect their organizations. Enter OCSF.Fri, 26 Aug 2022 00:00:00 GMTAWSBlack HatIBMOCSFPalo AltoSalesforceSplunkTheCISOhttps://cisotimes.com/password-management-lastpass-breached-source-code-stolen/https://cisotimes.com/password-management-lastpass-breached-source-code-stolen/Password management company LastPass disclosed a data breach that led to the disclosure of some portions of its source code to the attacker.Fri, 26 Aug 2022 00:00:00 GMTData BreachHackingLastPassPassword ManagerSource CodeTheCISOhttps://cisotimes.com/united-states-increases-cybersecurity-funding-to-address-increasingly-pervasive-cyber-attacks/https://cisotimes.com/united-states-increases-cybersecurity-funding-to-address-increasingly-pervasive-cyber-attacks/The House of Representatives finished marking up a dozen spending bills for fiscal 2023 that would altogether provide at least $15.6 billion for cybersecurity efforts across federal departments and agencies.Fri, 26 Aug 2022 00:00:00 GMTBidenCISACybersecurityDepartment of DefenceDoDFundingUSATheCISOhttps://cisotimes.com/pentest-interview-questions/https://cisotimes.com/pentest-interview-questions/A list of questions to prepare for your next pentest interview and help you land the job.Thu, 25 Aug 2022 00:00:00 GMTCybersecurityJob InterviewPenetration TestingDimitris Gkoutzamanishttps://cisotimes.com/half-of-twitters-workers-have-access-to-its-code-and-user-confidential-data/https://cisotimes.com/half-of-twitters-workers-have-access-to-its-code-and-user-confidential-data/Twitter's former head of security accused the social media company and its executives of "extensive legal violations."Wed, 24 Aug 2022 00:00:00 GMTElon MuskPeiter ZatkoTwitterWhistle-BlowerTheCISOhttps://cisotimes.com/microsoft-joins-hands-with-kaspersky-for-cyber-threat-intelligence/https://cisotimes.com/microsoft-joins-hands-with-kaspersky-for-cyber-threat-intelligence/Microsoft partners with Kaspersky for cyber threat intelligence, with access to Kaspersky TI through Microsoft Sentinel to empower enterprises with the latest insights to counter cyberattacks.Wed, 24 Aug 2022 00:00:00 GMTCloudCybersecurityKasperskyMicrosoftMicrosoft SentinelThreat IntelligenceTheCISOhttps://cisotimes.com/gitlab-patches-critical-vulnerability/https://cisotimes.com/gitlab-patches-critical-vulnerability/GitLab has released a security update to address a critical vulnerability that may lead to remote code execution.Tue, 23 Aug 2022 00:00:00 GMTGitlabRemote Code ExecutionVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/hackers-demand-10-million-dollars-from-a-paris-hospital-as-ransom/https://cisotimes.com/hackers-demand-10-million-dollars-from-a-paris-hospital-as-ransom/The CHSF Hospital Centre in Corbeil-Essonnes, southeast of Paris, is the new recent victim of hackers.Tue, 23 Aug 2022 00:00:00 GMTC3NCentre for Combating Digital CrimeCHSFData BreachHackingHospitalsParisPersonal DataRansomwareTheCISOhttps://cisotimes.com/hackers-target-greek-natural-gas-operator/https://cisotimes.com/hackers-target-greek-natural-gas-operator/The Ragnar Locker ransomware gang has claimed responsibility for an attack on Greece's national gas system operator (DESFA).Tue, 23 Aug 2022 00:00:00 GMTCritical InfrastructureData BreachDESFAGreeceHackingMalwareNatural GasRagnar LockerRansomwareVulnerabilityTheCISOhttps://cisotimes.com/palo-alto-pan-os-flaw-added-to-cisas-known-exploited-vulnerabilities-catalog/https://cisotimes.com/palo-alto-pan-os-flaw-added-to-cisas-known-exploited-vulnerabilities-catalog/The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw impacting Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities Catalog.Tue, 23 Aug 2022 00:00:00 GMTCISAPalo AltoPAN-OSVulnerabilityTheCISOhttps://cisotimes.com/penetration-testing-vs-vulnerability-scanning/https://cisotimes.com/penetration-testing-vs-vulnerability-scanning/There is a lot of misunderstanding and confusion in penetration testing vs vulnerability scanning. There are important differences you need to know.Thu, 18 Aug 2022 00:00:00 GMTExploitHackingNessusPenetration TestingQualysVAVulnerabilityVulnerability ScanningDimitris Gkoutzamanishttps://cisotimes.com/data-breaches-reach-all-time-high/https://cisotimes.com/data-breaches-reach-all-time-high/According to a new IBM security report, the global average cost of data breaches reached $4.35 million in 2022 which is an all time high, following the cost of $4.24 million in 2021.Tue, 02 Aug 2022 00:00:00 GMTCloudData BreachHackingHealthcareIBMPersonal DataTheCISOhttps://cisotimes.com/hacker-claims-to-have-obtained-data-of-1-billion-chinese-citizens/https://cisotimes.com/hacker-claims-to-have-obtained-data-of-1-billion-chinese-citizens/The hacker claims to have 23 terabytes of data in his possession obtained by the Shanghai National Police (SHGA).Tue, 05 Jul 2022 00:00:00 GMTChinaData BreachHackingVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/top-cybersecurity-and-information-security-job-positions/https://cisotimes.com/top-cybersecurity-and-information-security-job-positions/The 8 top Cybersecurity and Information security job positions in this booming industry. Relevant job postings have grown significantly worldwide and are more likely for this demand to show more growth.Mon, 23 May 2022 00:00:00 GMTCEHCertificationsCISACISSPCybersecurityJob PositionsJobsLearningPenetration TestingQualificationsDimitris Gkoutzamanishttps://cisotimes.com/passively-scanning-your-targets-with-smap/https://cisotimes.com/passively-scanning-your-targets-with-smap/Passively scan with Smap and avoid detection while gathering useful information on your targets.Tue, 10 May 2022 00:00:00 GMTHackingInformation GatheringPenetration TestingReconnaissanceShodanVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/three-new-web-application-security-risks-climb-up-the-owasp-top-10/https://cisotimes.com/three-new-web-application-security-risks-climb-up-the-owasp-top-10/Three new web application security risks climb up the OWASP top 10, the standard awareness document which represent a consensus about the most critical security risks to web applications.Fri, 22 Apr 2022 00:00:00 GMTCVECybersecurityHackingOWASPPenetration TestingVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/three-approaches-to-penetration-testing/https://cisotimes.com/three-approaches-to-penetration-testing/There are three primary approaches to conduct a penetration test. Choose between black, grey or white box depending on your end goals.Mon, 28 Mar 2022 00:00:00 GMTBlack BoxGrey BoxHackingNetwork SecurityPenetration TestingSource CodeWhite BoxDimitris Gkoutzamanishttps://cisotimes.com/apple-releases-patches-fixing-39-vulnerabilities/https://cisotimes.com/apple-releases-patches-fixing-39-vulnerabilities/Apple releases patches fixing 39 vulnerabilities several of which could allow an attacker to execute arbitrary code on an affected device.Wed, 16 Mar 2022 00:00:00 GMTAppleHackingiOSiPadMac OSVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/cyberattack-crashes-israeli-government-websites/https://cisotimes.com/cyberattack-crashes-israeli-government-websites/Users attempting to enter sites with gov.il extensions were unable to for at least an hour, before the sites slowly began to come back online.Wed, 16 Mar 2022 00:00:00 GMTCyber AttacksDDoSIsraelTheCISOhttps://cisotimes.com/thephish-an-open-source-phishing-email-analysis-tool/https://cisotimes.com/thephish-an-open-source-phishing-email-analysis-tool/A new open source phishing email analysis tool that automates the entire analysis process has been made freely available.Wed, 16 Mar 2022 00:00:00 GMTEmailEmail SecurityHacking ToolsOpen SourcePhishingDimitris Gkoutzamanishttps://cisotimes.com/email-which-claims-to-come-from-saudi-aramco-delivers-malware/https://cisotimes.com/email-which-claims-to-come-from-saudi-aramco-delivers-malware/The email pretends to come from Saudi Aramco, a Saudi Arabian public petroleum and natural gas company, and one of the largest companies in the world by revenue.Sun, 06 Mar 2022 00:00:00 GMTAramcoEmailFormBookMalwarePhishingSaudi AramcoVulnerabilityTheCISOhttps://cisotimes.com/retailer-blames-third-party-for-the-data-breach-of-more-than-100000-payment-cards/https://cisotimes.com/retailer-blames-third-party-for-the-data-breach-of-more-than-100000-payment-cards/Beauty product retailer Acro revealed that customers of two of its websites were impacted, exposing more than 100,000 payment cardsSun, 06 Mar 2022 00:00:00 GMTCredit CardData BreachJapanPersonal DataVulnerabilityTheCISOhttps://cisotimes.com/awesome-free-hacking-tool-for-red-teams-and-pentesters/https://cisotimes.com/awesome-free-hacking-tool-for-red-teams-and-pentesters/An awesome free hacking tool extremely useful for red teams and pentesters during their penetration testing or red team exercises.Thu, 03 Mar 2022 00:00:00 GMTBashCybersecurityHackingHacking ToolHackToolsLFINetcatPenetration TestingPHPPowerShellPythonRed TeamReverse ShellsDimitris Gkoutzamanishttps://cisotimes.com/how-to-secure-your-microservices/https://cisotimes.com/how-to-secure-your-microservices/Along with the many benefits of updating to microservices architecture, there are also new security challenges that organizations need to address.Thu, 03 Mar 2022 00:00:00 GMTContainer SecurityContainersDASTDefense in DepthDockerMicroservicesSASTVulnerabilityVulnerability ScanningDimitris Gkoutzamanishttps://cisotimes.com/war-between-russia-and-ukraine-goes-cyber/https://cisotimes.com/war-between-russia-and-ukraine-goes-cyber/The war between Russia and Ukraine goes cyber with several ongoing cyber-attacks from the Russian side, targeting Ukraine's banks and government department websites.Fri, 25 Feb 2022 00:00:00 GMTCyber AttacksCyber WarfareCybersecurityHackingMalwareRussiaUkraineDimitris Gkoutzamanishttps://cisotimes.com/a-new-tool-to-help-you-reveal-sensitive-information/https://cisotimes.com/a-new-tool-to-help-you-reveal-sensitive-information/Researchers have released a new tool to help you reveal sensitive information which has been redacted by the method of pixelation from a document.Tue, 15 Feb 2022 00:00:00 GMTHackingPasswordsPixelationSensitive InformationDimitris Gkoutzamanishttps://cisotimes.com/update-chrome-now-to-patch-an-actively-exploited-zero-day-vulnerability/https://cisotimes.com/update-chrome-now-to-patch-an-actively-exploited-zero-day-vulnerability/Google has released an update for its Chrome browser that includes eleven security fixes, one of which has been reportedly exploited in the wild.Tue, 15 Feb 2022 00:00:00 GMTBrowserChromeCVEGoogleVulnerabilityZero-DayDimitris Gkoutzamanishttps://cisotimes.com/new-vulnerabilities-allow-hackers-to-crash-siemens-plcs/https://cisotimes.com/new-vulnerabilities-allow-hackers-to-crash-siemens-plcs/Independent ICS security researcher Gao Jian recently discovered new vulnerabilities which can allow hackers to remotely crash Siemens PLCs.Sat, 12 Feb 2022 00:00:00 GMTHackingIoTKillwareOTPLCSiemensVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/google-cloud-gets-virtual-machine-threat-detection-to-help-detect-crypto-mining/https://cisotimes.com/google-cloud-gets-virtual-machine-threat-detection-to-help-detect-crypto-mining/Google announced the public preview of a tool which helps identify threats within virtual machines running on its Google Cloud infrastructure.Wed, 09 Feb 2022 00:00:00 GMTCryptocurrencyCryptocurrenciesGoogleGoogle CloudMalwareThreat DetectionVMTDDimitris Gkoutzamanishttps://cisotimes.com/oil-port-terminal-operations-disrupted-by-ransomware-attack/https://cisotimes.com/oil-port-terminal-operations-disrupted-by-ransomware-attack/The ransomware attack affected dozens of terminals, oil storage and transport around the world, including Oiltanking in Germany, SEA-Invest in Belgium and Evos in the Netherlands.Tue, 08 Feb 2022 00:00:00 GMTCritical InfrastructureData BreachEvosHackingMalwareOil PortOiltankingSEA-InvestTransportVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/best-privacy-browsing-apps-for-android/https://cisotimes.com/best-privacy-browsing-apps-for-android/If you want to avoid websites tracking and saving personal information when you visit them, then you should consider using on of the best privacy browsing apps for android.Sun, 06 Feb 2022 00:00:00 GMTAndroidAnonymityBraveBrowsersCakeFirefoxPersonal DataPrivacyTorDimitris Gkoutzamanishttps://cisotimes.com/hacker-took-down-the-internet-in-north-korea/https://cisotimes.com/hacker-took-down-the-internet-in-north-korea/An American hacker named P4x says he was behind a series of outages in North Korea's Internet a few weeks ago.Fri, 04 Feb 2022 00:00:00 GMTCybersecurityHackingNorth KoreaVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/320-million-stolen-from-crypto-trading-platform/https://cisotimes.com/320-million-stolen-from-crypto-trading-platform/By exploiting a vulnerability in the software of a crypto trading platform, hackers stole 320 million in cryptocurrencies.Thu, 03 Feb 2022 00:00:00 GMTCryptocurrencyCryptocurrenciesExploitHackingVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/cisco-patched-15-vulnerabilities-in-cisco-small-business-rv-series-routers/https://cisotimes.com/cisco-patched-15-vulnerabilities-in-cisco-small-business-rv-series-routers/Cisco published an advisory for 15 vulnerabilities in its Small Business RV Series Routers.Thu, 03 Feb 2022 00:00:00 GMTCiscoVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/developers-accidentally-turned-off-csrf-protection-in-popular-php-framework/https://cisotimes.com/developers-accidentally-turned-off-csrf-protection-in-popular-php-framework/Developers of the Symfony PHP framework have reversed a recent change that inadvertently turned off protection against CSRF attacks.Thu, 03 Feb 2022 00:00:00 GMTCSRFSymfonyVulnerabilityTheCISOhttps://cisotimes.com/hackers-use-powerpoint-files-to-deliver-malicious-files/https://cisotimes.com/hackers-use-powerpoint-files-to-deliver-malicious-files/A little-known PowerPoint add-on, the .ppam file, has been used by hackers to hide and deliver malicious files.Thu, 03 Feb 2022 00:00:00 GMTHackingMalwarePhishingPowerPointVirusDimitris Gkoutzamanishttps://cisotimes.com/actors-twitter-account-hacked-and-used-to-spam-on-nft-giveaways/https://cisotimes.com/actors-twitter-account-hacked-and-used-to-spam-on-nft-giveaways/On Thursday a verified twitter profile of Siobhan McSweeney, a well known Irish actor, was hacked and was used to spam on NFT giveaways.Mon, 31 Jan 2022 00:00:00 GMTHackingNFTPhishingTwitterTheCISOhttps://cisotimes.com/north-korean-apt-spreading-malware-through-spear-phishing-attacks/https://cisotimes.com/north-korean-apt-spreading-malware-through-spear-phishing-attacks/The "Lazarous Group", a North Korean APT conducted a spear phishing attack, weaponized with malicious documentsSun, 30 Jan 2022 00:00:00 GMTAPTHackingLazarusMalwarePhishingSpear PhishingDimitris Gkoutzamanishttps://cisotimes.com/tenable-over-40-billion-records-exposed-in-2021/https://cisotimes.com/tenable-over-40-billion-records-exposed-in-2021/Over 40 billion records were exposed in cyber incidents during 2021, up nearly 78% from 2020Sun, 30 Jan 2022 00:00:00 GMTData BreachMalwarePersonal DataResearchTenableVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/the-new-norm-parents-digitally-monitoring-their-children/https://cisotimes.com/the-new-norm-parents-digitally-monitoring-their-children/The majority of parents participated in an online survey responded that they are digitally monitoring their children.Sun, 30 Jan 2022 00:00:00 GMTMonitoringOnline SecurityParentingPrivacySocial MediaDimitris Gkoutzamanishttps://cisotimes.com/hackers-demand-ransom-for-hijacked-instagram-accounts/https://cisotimes.com/hackers-demand-ransom-for-hijacked-instagram-accounts/Hackers then demand ransom to be paid for the hijacked Instagram accounts.Thu, 27 Jan 2022 00:00:00 GMTData BreachHackingInstagramPersonal DataPhishingRansomSocial MediaDimitris Gkoutzamanishttps://cisotimes.com/13-known-exploited-vulnerabilities-added-to-cisa-catalog/https://cisotimes.com/13-known-exploited-vulnerabilities-added-to-cisa-catalog/CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities.Sun, 23 Jan 2022 00:00:00 GMTCISACybersecurityExploitsHackingVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/515000-people-affected-by-red-cross-data-breach/https://cisotimes.com/515000-people-affected-by-red-cross-data-breach/Over 515,000 people are affected by the Red Cross data breach incident. The ICRC has no information on who carried out the attack.Sun, 23 Jan 2022 00:00:00 GMTData BreachPersonal DataRed CrossTheCISOhttps://cisotimes.com/53-of-connected-medical-devices-have-serious-vulnerabilities/https://cisotimes.com/53-of-connected-medical-devices-have-serious-vulnerabilities/Critical device risks in hospital environments leave hospitals and patients vulnerable to cyber attacks and data security issues.Sun, 23 Jan 2022 00:00:00 GMTData BreachHealthcareIoTPersonal DataVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/hackers-using-azure-and-aws-to-spread-rats/https://cisotimes.com/hackers-using-azure-and-aws-to-spread-rats/Researchers from Cisco Talos Intelligence found that hackers are using public cloud providers like Azure and AWS to spread RATs.Sun, 23 Jan 2022 00:00:00 GMTAzureC2CloudHackingMalwareRATDimitris Gkoutzamanishttps://cisotimes.com/cisco-recently-patched-critical-vulnerabilities/https://cisotimes.com/cisco-recently-patched-critical-vulnerabilities/Cisco has patched a pair of vulnerabilities in its telco-focused Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS software, including a critical flaw that presented a remote code execution risk.Sat, 22 Jan 2022 00:00:00 GMTCiscoData LeakNetwork SecurityTelecommunicationsVulnerabilityTheCISOhttps://cisotimes.com/suspected-hacker-attack-on-greek-parliament/https://cisotimes.com/suspected-hacker-attack-on-greek-parliament/A temporary shutdown of the legislature's web mail followed the hack of 60 Greek Parliament emails on Friday.Sat, 22 Jan 2022 00:00:00 GMTData BreachData LeakEmailGreeceHackingParliamentPersonal DataDimitris Gkoutzamanishttps://cisotimes.com/it-company-fined-for-massive-voters-data-breach/https://cisotimes.com/it-company-fined-for-massive-voters-data-breach/The company had failed to notify the personal data breach to the data protection commissioner within the deadline stipulated by law. Nor had it informed victims of the breach that they had been affected.Tue, 18 Jan 2022 00:00:00 GMTData BreachMaltaPersonal DataVotingTheCISOhttps://cisotimes.com/microsoft-defender-vulnerability-remains-unpatched/https://cisotimes.com/microsoft-defender-vulnerability-remains-unpatched/Security researchers discovered that the list of locations excluded from Microsoft Defender scan is unprotected and accessible to any local user.Tue, 18 Jan 2022 00:00:00 GMTDefenderMicrosoftVulnerabilityTheCISOhttps://cisotimes.com/new-safari-vulnerability-can-leak-recent-browsing-history-and-some-of-your-google-account-information/https://cisotimes.com/new-safari-vulnerability-can-leak-recent-browsing-history-and-some-of-your-google-account-information/A new Safari vulnerability disclosed by FingerprintJS, can leak recent browsing history and some information of your logged-in Google account.Tue, 18 Jan 2022 00:00:00 GMTData BreachMacOSPersonal DataSafariVulnerabilityTheCISOhttps://cisotimes.com/you-need-to-patch-windows-remote-desktop-vulnerability-now/https://cisotimes.com/you-need-to-patch-windows-remote-desktop-vulnerability-now/This vulnerability enables any standard unprivileged user connected to a remote machine via remote desktop to gain file system access to the client machinesTue, 18 Jan 2022 00:00:00 GMTCyberArkHackingMicrosoftPatchingRemote DesktopVulnerabilityTheCISOhttps://cisotimes.com/what-are-dependency-confusion-attacks/https://cisotimes.com/what-are-dependency-confusion-attacks/A dependency confusion attack occurs when a software installer script is tricked into pulling malicious code file from a public repository instead of the intended file of the same name from an internal repository.Fri, 14 Jan 2022 00:00:00 GMTApplication SecurityDependency ConfusionMicrosoftSoftware DevelopmentSupply ChainVulnerabilityTheCISOhttps://cisotimes.com/fbi-warning-on-google-voice-authentication-scams/https://cisotimes.com/fbi-warning-on-google-voice-authentication-scams/FBI has issued a warning regarding a new scam utilizing Google voice authentication.The scam targets people who share their numbers publicly.Thu, 13 Jan 2022 00:00:00 GMTGoogleHackingPhishingScamsVoiceTheCISOhttps://cisotimes.com/huge-increase-of-wordpress-vulnerabilities-in-2021/https://cisotimes.com/huge-increase-of-wordpress-vulnerabilities-in-2021/A huge increase of 142% of WordPress vulnerabilities in 2021 compare to 2020. Most of them exploitable.Thu, 13 Jan 2022 00:00:00 GMTHackingPatchingVulnerabilityWordPressDimitris Gkoutzamanishttps://cisotimes.com/patch-microsoft-critical-flaw-now/https://cisotimes.com/patch-microsoft-critical-flaw-now/Microsoft recommends that you install the latest security updates which will patch the critical flaw now.Thu, 13 Jan 2022 00:00:00 GMTTheCISOhttps://cisotimes.com/indian-hackers-scored-an-embarrassing-own-goal/https://cisotimes.com/indian-hackers-scored-an-embarrassing-own-goal/Indian hackers infected themselves with their own RAT. Making it possible for security researchers to gather information on their methods.Mon, 10 Jan 2022 00:00:00 GMTAPTHackingMalwarePatchworkPhishingTheCISOhttps://cisotimes.com/easy-way-to-steal-wifi-passwords/https://cisotimes.com/easy-way-to-steal-wifi-passwords/Why waste time and resources capturing traffic and brute forcing WiFi passwords if there is an easy way to steal them?Fri, 07 Jan 2022 00:00:00 GMTArduinoDigisparkHackingPasswordsPenetration TestingWiFiWirelessDimitris Gkoutzamanishttps://cisotimes.com/automated-osint-for-security-assessments/https://cisotimes.com/automated-osint-for-security-assessments/If you are a red teamer or a penetration tester you got to love automated OSINT tools which will help your security assessments. Here is one of the best ones.Wed, 05 Jan 2022 00:00:00 GMTOSINTPenetration TestingReconnaissanceSpiderFootDimitris Gkoutzamanishttps://cisotimes.com/nist-publications-on-penetration-testing/https://cisotimes.com/nist-publications-on-penetration-testing/Penetration Testing is being mentioned in several NIST publications. See which those publications are and get more info on their recommendations.Tue, 04 Jan 2022 00:00:00 GMTComplianceCSFFrameworkHackingNISTNIST 800-53Penetration TestingDimitris Gkoutzamanishttps://cisotimes.com/data-breach-statistics-for-2021/https://cisotimes.com/data-breach-statistics-for-2021/The top five countries with the largest number of data breaches account for more than half of all breaches of 2021.Fri, 31 Dec 2021 00:00:00 GMTData BreachPersonal DataStatisticsUnited StatesDimitris Gkoutzamanishttps://cisotimes.com/information-security-best-practices-for-iot/https://cisotimes.com/information-security-best-practices-for-iot/IoT devices are at risk of attack by a variety of malicious actors which can take advantage of poor information security design of an IoT solution.Fri, 31 Dec 2021 00:00:00 GMTApplication SecurityCloudCybersecurityData ClassificationEncryptionHackingIoTNetwork SecurityOperating SystemPhysical SecurityDimitris Gkoutzamanishttps://cisotimes.com/35-ways-to-protect-yourself-online/https://cisotimes.com/35-ways-to-protect-yourself-online/The internet is a jungle of a million threats. Take action to protect yourself with the following 35 ways to protect yourself online.Thu, 30 Dec 2021 00:00:00 GMTAntivirusCloudEmailHackingMalwarePersonal DataSocial MediaSoftwareUpdatesWeb BrowsingDimitris Gkoutzamanishttps://cisotimes.com/t-mobile-suffers-another-data-breach/https://cisotimes.com/t-mobile-suffers-another-data-breach/After a previous breach in August where nearly 50 million customer data were leaked, T-Mobile suffered another data breach, this time less severe. It has affected only a small subset of customers.Thu, 30 Dec 2021 00:00:00 GMTData BreachMobileSIM SwapsT-MobileTheCISOhttps://cisotimes.com/4-free-online-tools-to-check-if-a-website-is-dangerous/https://cisotimes.com/4-free-online-tools-to-check-if-a-website-is-dangerous/A common method for malicious actors is to direct you to a phishing site in order to harvest your username and passwords and also to make you download malicious software (malware). Always safely check if a website is dangerous before you click.Wed, 29 Dec 2021 00:00:00 GMTHackingMalwarePhishingVirusTotalWebsitesDimitris Gkoutzamanishttps://cisotimes.com/a-19-year-old-hacker-received-4500-bug-bounty-for-an-easy-to-exploit-vulnerability/https://cisotimes.com/a-19-year-old-hacker-received-4500-bug-bounty-for-an-easy-to-exploit-vulnerability/A high impact privacy bug was found in Facebook's Android application by a young bug bounty hunter. The 19 year old hacker received a $4,500 bug bountyTue, 28 Dec 2021 00:00:00 GMTAndroidApplicationBug BountyFacebookMetaVulnerabilityTheCISOhttps://cisotimes.com/penetration-testing-create-a-dns-zone-transfer-lab/https://cisotimes.com/penetration-testing-create-a-dns-zone-transfer-lab/DNS zone transfers use the AXFR protocol to replicate DNS records across DNS servers. If you do not protect your name servers, attackers can get information about all your hosts with AXFR.Mon, 27 Dec 2021 00:00:00 GMTContainersDNSDockerVulhubVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/vulnerability-vs-exploit-do-you-know-the-difference/https://cisotimes.com/vulnerability-vs-exploit-do-you-know-the-difference/Many news and articles keep on referring to words like vulnerability and exploits. But do you really know the difference?Mon, 27 Dec 2021 00:00:00 GMTExploitRisk AssessmentVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/how-to-check-if-your-phone-has-been-hacked/https://cisotimes.com/how-to-check-if-your-phone-has-been-hacked/Is your device behaving weirdly? Outgoing calls you did not make, your device is getting hot without reason? Maybe its time to check if your phone has been hacked.Sun, 26 Dec 2021 00:00:00 GMTData BreachHackingMalwarePhishingSmartphonesDimitris Gkoutzamanishttps://cisotimes.com/copies-of-spider-man-no-way-home-infected-with-malware/https://cisotimes.com/copies-of-spider-man-no-way-home-infected-with-malware/The long awaited Marvel movie "Spider-Man: No Way Home" is out. People are trying to download an illegal copy are up for an unpleasant surprise.Fri, 24 Dec 2021 00:00:00 GMTCryptominerHackingMalwareMarvelMoviesSpidermanDimitris Gkoutzamanishttps://cisotimes.com/find-information-about-a-person-on-instagram-with-osintgram/https://cisotimes.com/find-information-about-a-person-on-instagram-with-osintgram/Social media platforms can betray a considerable amount of information on a person or organization which can be useful during a pentest information gathering.Thu, 23 Dec 2021 00:00:00 GMTHackingInstagramOSINTPenetration TestingPhishingDimitris Gkoutzamanishttps://cisotimes.com/popular-game-series-just-dance-targeted-by-attackers/https://cisotimes.com/popular-game-series-just-dance-targeted-by-attackers/Ubisoft Entertainment a French video game company recently announced that they have identified an intrusion in their IT Infrastructure targeting Just Dance.Thu, 23 Dec 2021 00:00:00 GMTData BreachHackingPersonal DataUbisoftTheCISOhttps://cisotimes.com/a-list-of-tools-to-help-you-detect-the-log4j-vulnerability/https://cisotimes.com/a-list-of-tools-to-help-you-detect-the-log4j-vulnerability/How can you detect the Log4j zero day vulnerability (known as Log4shell)? Here's a list of FREE Log4j vulnerability scanner tools.Wed, 22 Dec 2021 00:00:00 GMTAmazonArctic WolfCISAHackingLog4jLog4ShellPenetration TestingTrendMicroVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/nca-shares-585-million-compromised-passwords-with-have-i-been-pwned/https://cisotimes.com/nca-shares-585-million-compromised-passwords-with-have-i-been-pwned/The National Crime Agency of United Kingdom (NCA) shared a collection of more than 585 million compromised passwords that were found during an investigation with the infamous Have I Been Pwned website.Wed, 22 Dec 2021 00:00:00 GMTData BreachFBIHaveIBeenPwnedHIBPPasswordsTheCISOhttps://cisotimes.com/hacking-group-leaked-confidential-uk-police-data/https://cisotimes.com/hacking-group-leaked-confidential-uk-police-data/Russian hacking group "Clop" leaked confidential information held by the UK police onto the dark web. The data were stolen from Dacoll, an IT company which handles the Police National Computer.Mon, 20 Dec 2021 00:00:00 GMTClopData BreachHackingPhishingTheCISOhttps://cisotimes.com/threat-actors-impersonating-pfizer/https://cisotimes.com/threat-actors-impersonating-pfizer/Phishing campaigns that use COVID-19 as a hook are still on the rise. Hackers are increasingly using vaccine-related emails in their targeted spear-phishing attacks.Mon, 20 Dec 2021 00:00:00 GMTCOVID-19HackingPfizerPhishingTheCISOhttps://cisotimes.com/audio-tech-giant-exposed-thousands-of-customers-data/https://cisotimes.com/audio-tech-giant-exposed-thousands-of-customers-data/The data may be old, but it's still valuable to criminals and hackers, and the leak itself could have been much worse. It represents a massive oversight by a huge, multinational, well-known company.Sun, 19 Dec 2021 00:00:00 GMTAWSCloudData BreachS3 BucketTheCISOhttps://cisotimes.com/why-do-data-breaches-happen/https://cisotimes.com/why-do-data-breaches-happen/We have gotten used to seeing news every day of sensitive data being exposed to unauthorized parties, but do you know why do data breaches happen?Sun, 19 Dec 2021 00:00:00 GMTCloudData BreachHackingMalwarePersonal DataPhishingSocial EngineeringVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/build-a-penetration-testing-lab-on-a-raspberry-pi-with-dvwa/https://cisotimes.com/build-a-penetration-testing-lab-on-a-raspberry-pi-with-dvwa/You can build a pentest lab on a raspberry pi with DVWA to test your skills and also learn new tricks on how to attack and/or secure web applications.Sat, 18 Dec 2021 00:00:00 GMTBrute ForceDockerDVWAHackingLabPenetration TestingVulnerabilityXSSDimitris Gkoutzamanishttps://cisotimes.com/hunt-a-username-on-social-media-with-sherlock/https://cisotimes.com/hunt-a-username-on-social-media-with-sherlock/Many users register themselves on websites using the same username. If you are performing an investigation on a person, and especially if you know a username or handle they are usually using online, you may hunt for usernames on social media platforms with Sherlock.Sat, 18 Dec 2021 00:00:00 GMTPenetration TestingReconnaissanceSherlockSocial MediaUsernamesDimitris Gkoutzamanishttps://cisotimes.com/facebook-owner-meta-bans-fake-accounts-used-by-cyber-spy-firms/https://cisotimes.com/facebook-owner-meta-bans-fake-accounts-used-by-cyber-spy-firms/Facebook said it canceled 1,500 fake social media accounts used by seven surveillance-for-hire firms to conduct online attacks against government critics and members of civil society.Fri, 17 Dec 2021 00:00:00 GMTCybersecurityFacebookMetaSurveillanceTheCISOhttps://cisotimes.com/web-dashboard-for-your-nmap-scans/https://cisotimes.com/web-dashboard-for-your-nmap-scans/WebMap is a web dashboard for your nmap scans. This tool, which is free, can provide you with more management capabilities of your scan results.Thu, 16 Dec 2021 00:00:00 GMTnmapPenetration TestingWebMapDimitris Gkoutzamanishttps://cisotimes.com/how-to-find-domains-owned-by-a-company/https://cisotimes.com/how-to-find-domains-owned-by-a-company/During a black box, or grey box penetration testing engagement for a company, one of the main things you will need to find domains owned by the company.Wed, 15 Dec 2021 00:00:00 GMTDomainsHackingPenetration TestingReconnaissancereverse whoisDimitris Gkoutzamanishttps://cisotimes.com/cryptocurrency-exchange-hacked/https://cisotimes.com/cryptocurrency-exchange-hacked/On Sunday, AscendEX announced via Twitter that it had identified a number of unauthorized transactions from one of its hot wallets on Saturday.Tue, 14 Dec 2021 00:00:00 GMTCryptocurrenciesData BreachHackingTheCISOhttps://cisotimes.com/hr-management-platform-hit-by-ransomware/https://cisotimes.com/hr-management-platform-hit-by-ransomware/HR management platform Kronos has been hit by a ransomware attack and information from its customers may have been accessed.Tue, 14 Dec 2021 00:00:00 GMTData BreachHackingMalwareRansomwareDimitris Gkoutzamanishttps://cisotimes.com/massive-internet-scans-and-log4j-exploit-attempts/https://cisotimes.com/massive-internet-scans-and-log4j-exploit-attempts/Many organizations have noticed a surge in internet scans to discover vulnerable systems and exploit attempts on them.Tue, 14 Dec 2021 00:00:00 GMTApacheExploitHackingMalwareVulnerabilityTheCISOhttps://cisotimes.com/top-malware-for-november-2021/https://cisotimes.com/top-malware-for-november-2021/Checkpoint Research through its global threat index revelas the top malware for November 2021.Tue, 14 Dec 2021 00:00:00 GMTMalwareTheCISOhttps://cisotimes.com/what-is-a-botnet/https://cisotimes.com/what-is-a-botnet/Many cyber attacks are carried out by malicious actors with the use of "Botnets". But what is a botnet? Botnet is short for "robot-network".Wed, 08 Dec 2021 00:00:00 GMTBotnetsCybersecurityDark NexusDDoSHackingMalwareMethbotMiraiPhishingDimitris Gkoutzamanishttps://cisotimes.com/more-than-21-million-people-affected-after-dna-testing-center-data-breach/https://cisotimes.com/more-than-21-million-people-affected-after-dna-testing-center-data-breach/An Ohio based DNA testing company has reported a data breach that lead to the leak of personal information including Social Security Numbers and banking information of 2,102,436 people.Wed, 01 Dec 2021 00:00:00 GMTCybersecurityData BreachHackingPersonal DataTheCISOhttps://cisotimes.com/panasonic-network-has-been-hacked/https://cisotimes.com/panasonic-network-has-been-hacked/The Japanese company Panasonic said that its network was illegally accessed by a third party on November 11 and that some data on a file server had been accessed during the intrusion.Wed, 01 Dec 2021 00:00:00 GMTCyber AttacksData BreachHackingPanasonicTheCISOhttps://cisotimes.com/enhanced-automated-vulnerability-management-for-cloud-workloads-announced-by-aws/https://cisotimes.com/enhanced-automated-vulnerability-management-for-cloud-workloads-announced-by-aws/Newly added capabilities for the Amazon Inspector service will meet the "critical need to detect and remediate at speed" in order to secure cloud workloads. %Tue, 30 Nov 2021 00:00:00 GMTAWSCloudRiskVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/find-web-server-vulnerabilities-with-nikto/https://cisotimes.com/find-web-server-vulnerabilities-with-nikto/Nikto is an open source scanner capable of scanning for over 6700 items to detect any misconfigurations on web servers like Apache, Nginx, Litespeed etc. as well as discovery of exposed files, user enumeration and outdated components.Tue, 30 Nov 2021 00:00:00 GMTCybersecurityHackingniktoPenetration TestingWeb ApplicationDimitris Gkoutzamanishttps://cisotimes.com/how-to-secure-your-zoom-meetings/https://cisotimes.com/how-to-secure-your-zoom-meetings/Zoom has around 300 million daily meeting participants! It also has security issues like "Zoom bombings" where uninvited guests may show up at meetings and another more "creepy" vulnerability which left millions of users exposed, which offered access to user's cameras and microphones.Tue, 30 Nov 2021 00:00:00 GMTApplication SecurityVulnerabilityZoomDimitris Gkoutzamanishttps://cisotimes.com/google-warns-for-hacked-cloud-accounts-used-for-crypto-mining/https://cisotimes.com/google-warns-for-hacked-cloud-accounts-used-for-crypto-mining/recently launched Google Cybersecurity Action Team (GCAT) provided specific insights, such as when malicious hackers exploit improperly-secured cloud instances to download cryptocurrency mining software to the system—sometimes within 22 seconds of being compromised.Mon, 29 Nov 2021 00:00:00 GMTCloudCryptocurrencyGoogleMalwarePhishingDimitris Gkoutzamanishttps://cisotimes.com/marine-services-rovider-swire-pacific-offshore-suffers-data-breach-following-cyber-attack/https://cisotimes.com/marine-services-rovider-swire-pacific-offshore-suffers-data-breach-following-cyber-attack/SPO has taken immediate actions to reinforce existing security measures and to mitigate the potential impact of the incident. SPO has reported the incident to the relevant authorities and will work closely with them in relation to the incident. SPO is contacting potentially affected parties to in…Mon, 29 Nov 2021 00:00:00 GMTCybersecurityData BreachHackingMaritimePersonal DataSwire Pacific OffshoreDimitris Gkoutzamanishttps://cisotimes.com/information-security-black-friday-deals-you-should-grab-now/https://cisotimes.com/information-security-black-friday-deals-you-should-grab-now/Many information security black friday deals you should grab right now, if you are a professional, a student, a researcher, or just a curious person who wantsThu, 25 Nov 2021 00:00:00 GMTCybersecurityLearningPenetration TestingDimitris Gkoutzamanishttps://cisotimes.com/apple-sues-company-known-for-hacking-iphones/https://cisotimes.com/apple-sues-company-known-for-hacking-iphones/Apple sues company known for hacking iPhones on behalf of governments. An Israeli firm called NSO Group, provided software to government agencies and law enforcement that enables them to hack iPhones and read the data on them, including messages and other communications.Wed, 24 Nov 2021 00:00:00 GMTAppleiPhoneNSOVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/discover-subdomains-during-a-penetration-testing-engagement/https://cisotimes.com/discover-subdomains-during-a-penetration-testing-engagement/During an external penetration test, and especially if it is a black-box engagement, one of the most important steps is to find subdomains used by the target company.Wed, 24 Nov 2021 00:00:00 GMTDomainsPenetration TestingReconnaissanceSubdomainsDimitris Gkoutzamanishttps://cisotimes.com/more-than-half-of-organizations-are-not-effectively-defending-against-cyberattacks/https://cisotimes.com/more-than-half-of-organizations-are-not-effectively-defending-against-cyberattacks/According to a recent Accenture study, more than half of organizations are not effectively defending against cyberattacks.Wed, 24 Nov 2021 00:00:00 GMTaccentureCybersecurityrisksDimitris Gkoutzamanishttps://cisotimes.com/researcher-publishes-exploit-affecting-all-windows-versions/https://cisotimes.com/researcher-publishes-exploit-affecting-all-windows-versions/A security researcher has published a public exploit on Github that allows a low privileged user on all client and server windows operating systems, to gain administrative rights.Wed, 24 Nov 2021 00:00:00 GMTExploitWindowsDimitris Gkoutzamanishttps://cisotimes.com/godaddy-data-breach-affects-1-2-million-customer-accounts/https://cisotimes.com/godaddy-data-breach-affects-1-2-million-customer-accounts/The company detected unauthorized access to its systems where customer's Wordpress servers are hosted and managed.Tue, 23 Nov 2021 00:00:00 GMTCloudData BreachGoDaddyHackingWordPressDimitris Gkoutzamanishttps://cisotimes.com/find-out-if-any-of-your-accounts-has-been-hacked/https://cisotimes.com/find-out-if-any-of-your-accounts-has-been-hacked/A few ways to discover if any of your accounts has been hacked. Either with the help of Google Chrome or with the use of online tools.Mon, 22 Nov 2021 00:00:00 GMTAvastData BreachF-SecureGoogleHackingHaveIBeenPwnedPasswordsPersonal DataDimitris Gkoutzamanishttps://cisotimes.com/88-of-boards-of-directors-view-cybersecurity-as-a-business-risk/https://cisotimes.com/88-of-boards-of-directors-view-cybersecurity-as-a-business-risk/The influx of ransomware and supply chain attacks seen throughout 2021, many of which targeted operation- and mission-critical environments, should be a wake-up call that security is a business issue, and not just another problem for IT to solveSun, 21 Nov 2021 00:00:00 GMTCybersecurityGartnerSurveyDimitris Gkoutzamanishttps://cisotimes.com/robinhood-revealed-that-a-data-breach-last-week-exposed-millions-of-customers-emails-and-other-personal-information/https://cisotimes.com/robinhood-revealed-that-a-data-breach-last-week-exposed-millions-of-customers-emails-and-other-personal-information/Robinhood said that hackers obtained around 5 million email addresses and full names for different group of approximately two million people.Sun, 21 Nov 2021 00:00:00 GMTMandiantRobinhoodTheCISOhttps://cisotimes.com/watch-out-shoppers-number-of-malicious-shopping-websites-jumps-178-ahead-of-black-friday-sales/https://cisotimes.com/watch-out-shoppers-number-of-malicious-shopping-websites-jumps-178-ahead-of-black-friday-sales/Check Point Research spotted over 5300 malicious websites per week, marking it the highest since the beginning of 2021. The number of malicious websites made to trick you and obtaining your credit card and your login information, many times for well known websites as amazon.Sat, 20 Nov 2021 00:00:00 GMTBlack FridayPasswordsPhishingDimitris Gkoutzamanishttps://cisotimes.com/the-king-of-most-common-passwords-still-sits-on-its-throne/https://cisotimes.com/the-king-of-most-common-passwords-still-sits-on-its-throne/NordPass has published a study with the top 200 most common passwords for 2021. The study covered 50 countries.Thu, 18 Nov 2021 00:00:00 GMTHackingLeaksDimitris Gkoutzamanishttps://cisotimes.com/fbi-email-system-hacked-and-sent-out-fake-cyber-attack-alerts/https://cisotimes.com/fbi-email-system-hacked-and-sent-out-fake-cyber-attack-alerts/FBI has confirmed that an unnamed actor was able to gain access to the FBI's Law Enforcement Enterprise Portal (LEEP) to send the emails to thousands of recipients about a fake cyberattack.Wed, 17 Nov 2021 00:00:00 GMTEmailFBIHackingDimitris Gkoutzamanishttps://cisotimes.com/the-rise-of-killware/https://cisotimes.com/the-rise-of-killware/The objective of the attacker is to cause harm to humans using killware in the Operational Technology environment. Many similar attacks have been identified since the year 2000, even though they were not called killware back then.Sat, 30 Oct 2021 00:00:00 GMTCyber AttacksKillwareMalwareOTDimitris Gkoutzamanishttps://cisotimes.com/azure-active-directory-brute-force-attack/https://cisotimes.com/azure-active-directory-brute-force-attack/An unpatched security weakness in Azure Active Directory might be leveraged by attackers to conduct undetected brute-force attacks, according to security researchers.Sat, 02 Oct 2021 00:00:00 GMTAzureBrute-ForceMicrosoftPoCDimitris Gkoutzamanishttps://cisotimes.com/coinbase-users-hacked/https://cisotimes.com/coinbase-users-hacked/vulnerability in the SMS multi-factor authentication mechanism of Coinbase was used by hackers to steal funds from 6000 usersSat, 02 Oct 2021 00:00:00 GMTCoinbaseCryptocurrencyHackingSMSDimitris Gkoutzamanishttps://cisotimes.com/the-biggest-ddos-attack-in-history/https://cisotimes.com/the-biggest-ddos-attack-in-history/Russian tech company Yandex said that it suffered from the largest DDoS attack ever recorded in the history of the internet.Sun, 12 Sep 2021 00:00:00 GMTAttackBotnetDDoSYandexDimitris Gkoutzamanishttps://cisotimes.com/enumerate-medata-of-files-on-websites/https://cisotimes.com/enumerate-medata-of-files-on-websites/Many organizations are uploading files on their websites like pdf, word and excel without being aware that they are exposing sensitive information. You can enumerate and capture the files and its metadata.Sat, 11 Sep 2021 00:00:00 GMTenumerationPenetration TestingToolsDimitris Gkoutzamanishttps://cisotimes.com/united-nations-breached-by-hackers/https://cisotimes.com/united-nations-breached-by-hackers/Hackers breached the United Nations' computer networks earlier this year and made off with a trove of data that could be used to target agencies within the intergovernmental organization.Sat, 11 Sep 2021 00:00:00 GMTBreachHackingUNUnited NationsTheCISOhttps://cisotimes.com/microsoft-released-mitigations-on-recently-discovered-attack-method/https://cisotimes.com/microsoft-released-mitigations-on-recently-discovered-attack-method/PetitPotam takes advantage of servers where the Active Directory Certificate Services (AD CS) is not configured with protections for NTLMMon, 26 Jul 2021 00:00:00 GMTMicrosoftNTLMPetitPotamTheCISOhttps://cisotimes.com/spreading-malware-using-old-techniques-it-still-works/https://cisotimes.com/spreading-malware-using-old-techniques-it-still-works/Operators of the malware known as SolarMarker, are using an old technique called SEO poisoning to trick users to follow links on PDF documents stuffed with many SEO keywords and redirect them to malware.Tue, 15 Jun 2021 00:00:00 GMTMalwareMicrosoftSEOSolarMarkerDimitris Gkoutzamanishttps://cisotimes.com/cool-nmap-tricks-and-techniques/https://cisotimes.com/cool-nmap-tricks-and-techniques/A list of not so commonly used but powerful Nmap commands to help you bring your enumeration skills to the next level.Sun, 06 Jun 2021 00:00:00 GMTenumerationnmapPenetration TestingPort ScanScanningDimitris Gkoutzamanishttps://cisotimes.com/ibm-announces-cybersecurity-grants-for-public-schools/https://cisotimes.com/ibm-announces-cybersecurity-grants-for-public-schools/IBM announced that it would be introducing in-kind grants to six school districts valued at $3 million to boost cybersecurity in schools.Sat, 06 Feb 2021 00:00:00 GMTCybersecurityIBMTrainingTheCISOhttps://cisotimes.com/how-much-are-your-details-worth-on-the-dark-web/https://cisotimes.com/how-much-are-your-details-worth-on-the-dark-web/Researchers from Comparitech, a UK-based online security firm, analyzed more than 40 dark web marketplaces to see how much identities and bundles of full userWed, 03 Feb 2021 00:00:00 GMTCredentialsCredit CardDark WebData BreachPersonal DataPhishingTheCISOhttps://cisotimes.com/top-threats-for-wordpress-sites/https://cisotimes.com/top-threats-for-wordpress-sites/Security firm Wordfence released a report identifying the top security vulnerabilities and threats and common attacks against wordpress websites.Tue, 02 Feb 2021 00:00:00 GMTMalwareReportThreatsVulnerabilityWordfenceWordPressDimitris Gkoutzamanishttps://cisotimes.com/apple-ios-14-introduces-blastdoor-to-prevent-execution-of-malicious-code/https://cisotimes.com/apple-ios-14-introduces-blastdoor-to-prevent-execution-of-malicious-code/Apple introduces new security mechanism to iMessage, called BlastDoor. What does it do?Sun, 31 Jan 2021 00:00:00 GMTAppleBlastDooriMessageiOSTheCISOhttps://cisotimes.com/even-the-smartest-people-get-hacked/https://cisotimes.com/even-the-smartest-people-get-hacked/Mensa UK , the "high IQ society" organization had failed to secure the data of its 18,000 members properly.Sun, 31 Jan 2021 00:00:00 GMTBreachIQMensaTheCISOhttps://cisotimes.com/u-s-wireless-carrier-with-4-9-million-customers-hacked/https://cisotimes.com/u-s-wireless-carrier-with-4-9-million-customers-hacked/Retail store's employee were scammed into downloading software on a computer which allowed an attacker to access the computer remotely. The hacker gained access to the company's CRM records since the employee was already logged in to the system.Sat, 30 Jan 2021 00:00:00 GMTCRMData BreachTheCISOhttps://cisotimes.com/what-is-a-zero-day-exploit/https://cisotimes.com/what-is-a-zero-day-exploit/Understand what a zero-day exploit is and how your organization can defend against such attacks which target unknown vulnerabilities of your systems and applications.Tue, 26 Jan 2021 00:00:00 GMTAttacksBlueKeepExploitsHackingHeartbleedShellshockVulnerabilityzero dayDimitris Gkoutzamanishttps://cisotimes.com/dont-fail-your-dlp-program/https://cisotimes.com/dont-fail-your-dlp-program/Plan your DLP implementation with the right steps. Dont fail before you start. Here are a list of steps to take to ensure success.Wed, 07 Oct 2020 00:00:00 GMTDLPDimitris Gkoutzamanishttps://cisotimes.com/pentest-reports-that-brings-value-to-your-customer/https://cisotimes.com/pentest-reports-that-brings-value-to-your-customer/Penetration Test Reports must bring value to your clients. There are key elements every proper pentest report must include.Mon, 27 Jul 2020 00:00:00 GMTDimitris Gkoutzamanishttps://cisotimes.com/the-basics-of-it-security-audit/https://cisotimes.com/the-basics-of-it-security-audit/An IT security audit is an evaluation of the security of a company's information systems by measuring how well they conform to a set of established and agreed-upon criteria.Thu, 09 Jul 2020 00:00:00 GMTAuditCAATIT AuditCybersecurityDimitris Gkoutzamanishttps://cisotimes.com/famous-mobile-apps-are-spying-on-you/https://cisotimes.com/famous-mobile-apps-are-spying-on-you/During the last few weeks there have been several occasions where famous and widely used mobile applications have been caught on spying on your device'sTue, 07 Jul 2020 00:00:00 GMTAppsiOSMobileTheCISOhttps://cisotimes.com/types-of-man-in-the-middle-attacks/https://cisotimes.com/types-of-man-in-the-middle-attacks/What is a Man-In-The-Middle attack and how the attacker can use it against you. Is there a way to protect yourself from such attacks?Tue, 07 Jul 2020 00:00:00 GMTDimitris Gkoutzamanishttps://cisotimes.com/us-secret-service-rise-in-hacks-of-managed-service-providers-msps/https://cisotimes.com/us-secret-service-rise-in-hacks-of-managed-service-providers-msps/The US Secret Service sent out a security alert last month to the US private sector and government organizations warning about an increase in hacks of managed service providers (MSPs).Tue, 07 Jul 2020 00:00:00 GMTAttacksCyber AttacksHackingMSPReportTheCISOhttps://cisotimes.com/compliance-does-not-equal-security/https://cisotimes.com/compliance-does-not-equal-security/Do not assume that being compliant with a security framework your organization is secure. You need to understand how compliance differs from security.Sat, 04 Jul 2020 00:00:00 GMTComplianceGRCISONISTPCIDimitris Gkoutzamanishttps://cisotimes.com/hackers-extorted-1-14m-from-university-of-california-san-francisco/https://cisotimes.com/hackers-extorted-1-14m-from-university-of-california-san-francisco/A leading medical-research institution working on a cure for Covid-19 has admitted it paid hackers a $1.14m (£910,000) ransom after a covert negotiationTue, 30 Jun 2020 00:00:00 GMTRansomwareTheCISOhttps://cisotimes.com/indian-government-hack-exposes-80000-coronavirus-patients-data/https://cisotimes.com/indian-government-hack-exposes-80000-coronavirus-patients-data/Indian hackers claim to have accessed more than 80,000 coronavirus patients' healthcare records that were insecurely stored on government servers.Tue, 30 Jun 2020 00:00:00 GMTTheCISOhttps://cisotimes.com/fileless-malware-are-not-new-but-are-is-dangerous/https://cisotimes.com/fileless-malware-are-not-new-but-are-is-dangerous/File-less malware is an advanced threat that can use legitimate software to compromise systems to steal information.Fri, 26 Jun 2020 00:00:00 GMTMalwarePowerShellDimitris Gkoutzamanishttps://cisotimes.com/south-african-bank-to-replace-12m-cards-after-employees-stole-the-master-key/https://cisotimes.com/south-african-bank-to-replace-12m-cards-after-employees-stole-the-master-key/The Sunday Times of South Africa, which revealed the story, said the incident took place in December 2018 when someone printed the bank's master key on aTue, 16 Jun 2020 00:00:00 GMTCardsKeysTheCISOhttps://cisotimes.com/free-and-essential-security-tools-you-should-already-be-using/https://cisotimes.com/free-and-essential-security-tools-you-should-already-be-using/The most important, free and powerful security tools which you should be using right now to assess your systems and network and uncover vulnerabilities.Fri, 12 Jun 2020 00:00:00 GMTScanningToolsVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/google-faces-5-billion-lawsuit-for-tracking-people-in-incognito-mode/https://cisotimes.com/google-faces-5-billion-lawsuit-for-tracking-people-in-incognito-mode/Google faces a lawsuit that accuses the company of invading people's privacy and tracking internet use even when browsers are set to "private" mode.Wed, 03 Jun 2020 00:00:00 GMTTheCISOhttps://cisotimes.com/how-to-be-anonymous-online/https://cisotimes.com/how-to-be-anonymous-online/Tools and techniques for the protection of your identity online. Be as anonymous as possible. Protect your personal data.Sun, 31 May 2020 00:00:00 GMTAnonymousDuckDuckGoPersonal DataPrivacyTorVPNDimitris Gkoutzamanishttps://cisotimes.com/how-to-detect-and-prevent-crypto-mining-in-your-environment/https://cisotimes.com/how-to-detect-and-prevent-crypto-mining-in-your-environment/Cryptojacking has become increasingly popular and you have to be aware of the protection measures you must take to protect your environment from it.Sat, 23 May 2020 00:00:00 GMTCryptocurrenciesCryptojackingCryptosMalwareMiningDimitris Gkoutzamanishttps://cisotimes.com/malware-opens-rdp-ports-for-future-access/https://cisotimes.com/malware-opens-rdp-ports-for-future-access/The Sarwent malware is a lesser-known backdoor trojan that has been around since 2018. In a recent campaign it received two critical updates.Fri, 22 May 2020 00:00:00 GMTMalwareRemote DesktopTheCISOhttps://cisotimes.com/how-to-become-a-cybersecurity-expert/https://cisotimes.com/how-to-become-a-cybersecurity-expert/What are the skills needed to start in the cybersecurity field? Here are some practical steps you can take to dive in and build your skills.Wed, 20 May 2020 00:00:00 GMTCloudCOBITContainerFrameworksCybersecurityISONISTPCI DSSPenetration TestingProgrammingStandardsDimitris Gkoutzamanishttps://cisotimes.com/microsoft-confirms-thunderspy-vulnerability/https://cisotimes.com/microsoft-confirms-thunderspy-vulnerability/Microsoft has confirmed the risk that "an attacker with physical access to a system can use Thunderspy to read and copy data even from systemsMon, 18 May 2020 00:00:00 GMTMicrosoftThunderspyTheCISOhttps://cisotimes.com/cloud-threat-report-2020/https://cisotimes.com/cloud-threat-report-2020/The "Cloud Threat and Security Report 2020" which identifies the key risks and challenges that organizations face as they implement and maintain cloud solutionsSun, 17 May 2020 00:00:00 GMTCloudCyber AttacksDevOpsOracleReportThreatTheCISOhttps://cisotimes.com/hackers-threaten-to-reveal-dirty-laundry-on-donald-trump/https://cisotimes.com/hackers-threaten-to-reveal-dirty-laundry-on-donald-trump/Mr. Trump, if you want to stay president, poke a sharp stick at the guys, otherwise, you may forget this ambition forever. And to you voters, we can let you know that after such a publication, you certainly don't want to see him as president. The deadline is one week.Fri, 15 May 2020 00:00:00 GMTData BreachFBIHackingHackersTrumpTheCISOhttps://cisotimes.com/thunderspy-attack-impacts-millions-of-apple-windows-linux-machines/https://cisotimes.com/thunderspy-attack-impacts-millions-of-apple-windows-linux-machines/A researcher discovered a security flaw in Intel's Thunderbolt ports, common to many laptops produced before 2019.Fri, 15 May 2020 00:00:00 GMTAppleHackingThunderboltVulnerabilityWindowsTheCISOhttps://cisotimes.com/penetration-testing-pre-engagement-interactions/https://cisotimes.com/penetration-testing-pre-engagement-interactions/There are many important actions you should focus on prior to diving into a penetration test. PenTests are not just point-and-shoot activities.Thu, 14 May 2020 00:00:00 GMTHackingPenetration TestingDimitris Gkoutzamanishttps://cisotimes.com/how-to-protect-your-company-from-insider-threats/https://cisotimes.com/how-to-protect-your-company-from-insider-threats/What is an insider threat for an organization, how it can materialize and what can you do to defend against such threats.Mon, 11 May 2020 00:00:00 GMTData LeakFraudInsider ThreatsThreatDimitris Gkoutzamanishttps://cisotimes.com/a-simple-summary-of-gdpr/https://cisotimes.com/a-simple-summary-of-gdpr/Know what GDPR is and how it can protect and give you more control over your personal data. You have rights over your data, learn what those are and how you can use them through this summary of GDPR.Sun, 10 May 2020 00:00:00 GMTGDPRDimitris Gkoutzamanishttps://cisotimes.com/law-firm-representing-madonna-lady-gaga-and-others-suffer-data-breach/https://cisotimes.com/law-firm-representing-madonna-lady-gaga-and-others-suffer-data-breach/The stolen data include sensitive information like contracts, phone numbers, email addresses, personal correspondence.Sun, 10 May 2020 00:00:00 GMTDark WebData BreachHackingPersonal DataTheCISOhttps://cisotimes.com/vulnerabilities-found-in-top-vpn-providers/https://cisotimes.com/vulnerabilities-found-in-top-vpn-providers/Vulnerabilities where found in two of the top 20 VPN providers.Fri, 08 May 2020 00:00:00 GMTVPNTheCISOhttps://cisotimes.com/microsoft-offers-100000-to-hack-their-linux-os/https://cisotimes.com/microsoft-offers-100000-to-hack-their-linux-os/Microsoft Offers 100,000 if you hack their custom Linux OS.Thu, 07 May 2020 00:00:00 GMTAzureCloudHackingMCUMicrosoftTheCISOhttps://cisotimes.com/unacademy-hacked-22mil-user-information-for-sale/https://cisotimes.com/unacademy-hacked-22mil-user-information-for-sale/Unacademy is one of the largest online learning platforms in India. According to security firm Cyble Inc, a hacker is offering the user database which contains 21,909,707 records, for $2,000.Thu, 07 May 2020 00:00:00 GMTData BreachData LeakHackingPersonal DataUnacademyTheCISOhttps://cisotimes.com/types-of-dns-attacks/https://cisotimes.com/types-of-dns-attacks/Learn the types of DNS attacks that can harm your organisation so you know what you are dealing with and recognise them when the time comes.Wed, 06 May 2020 00:00:00 GMTDNSDNS AttackDNS CacheDNS FloodDNS HijackDimitris Gkoutzamanishttps://cisotimes.com/critical-vulnerability-gives-remote-command-execution-as-root/https://cisotimes.com/critical-vulnerability-gives-remote-command-execution-as-root/Two critical vulnerabilities in the software of the open-source Salt project have been awarded the highest possible CVSS score of 10!Tue, 05 May 2020 00:00:00 GMTF-SecureLineageOSSaltSaltstackTheCISOhttps://cisotimes.com/only-half-of-organizations-say-their-security-teams-are-prepared-for-cyberattacks/https://cisotimes.com/only-half-of-organizations-say-their-security-teams-are-prepared-for-cyberattacks/Only 51 percent of technology professionals and leaders are highly confident that their cybersecurity teams are ready to detect and respond to the rising cybersecurity attacks.Tue, 05 May 2020 00:00:00 GMTCOVIDCyber AttacksISACASurveyTheCISOhttps://cisotimes.com/five-top-penetration-testing-frameworks-and-methodologies/https://cisotimes.com/five-top-penetration-testing-frameworks-and-methodologies/Which are the best frameworks for penetration testing? What are the attributes of each and which one is best for your organization?Mon, 04 May 2020 00:00:00 GMTNISTOSSTMMOWASPPenetration TestingPTESDimitris Gkoutzamanishttps://cisotimes.com/40-million-class-action-complaint-for-personal-data-disclosure/https://cisotimes.com/40-million-class-action-complaint-for-personal-data-disclosure/Maurice Blackburn Lawyers has launched a class action complaint against Optus which claims that Optus disclosed the personal data of 50,000 customers in a privacy breach.Mon, 27 Apr 2020 00:00:00 GMTAustraliaData LeakPersonal DataPrivacyTelecomTheCISOhttps://cisotimes.com/sophos-xgfirewall-hacked-hotfix-available/https://cisotimes.com/sophos-xgfirewall-hacked-hotfix-available/Hackers were spotted exploiting a vulnerability on Sophos XG firewalls which lead to the abuse of the firewall configuration, exposing information such as usernames and passwords.Mon, 27 Apr 2020 00:00:00 GMTFirewallHotfixSophosSQL injectionTheCISOhttps://cisotimes.com/what-is-google-dorking/https://cisotimes.com/what-is-google-dorking/Google Dorking is great for penetration testing activities and security researching but can also be used to aid in the protection of sensitive information.Mon, 27 Apr 2020 00:00:00 GMTGooglePersonal DataSearchDimitris Gkoutzamanishttps://cisotimes.com/160000-nintendo-player-accounts-hacked/https://cisotimes.com/160000-nintendo-player-accounts-hacked/Recently 160,000 Nintendo player accounts got hacked. The hackers exploited a weakness and gained access to player data.Sat, 25 Apr 2020 00:00:00 GMTData BreachHackingNintendoTheCISOhttps://cisotimes.com/new-certification-offered-by-giac/https://cisotimes.com/new-certification-offered-by-giac/The new GIAC cybersecurity certification shows that you can put modern principles into practice in an automated and repeatable mannerSat, 25 Apr 2020 00:00:00 GMTAutomationCloudExamGIACTrainingTheCISOhttps://cisotimes.com/devsecops-why-you-should-put-sec-in-devops/https://cisotimes.com/devsecops-why-you-should-put-sec-in-devops/It is important to understand the need for security integration in the DevOps environment. Security belongs in the DevOps lifecycle.Fri, 24 Apr 2020 00:00:00 GMTDevOpsDevSecOpsDimitris Gkoutzamanishttps://cisotimes.com/iphones-crashing-from-simple-text-messages/https://cisotimes.com/iphones-crashing-from-simple-text-messages/The latest Apple mobile OS version iOS 13.4.1 has a text bomb bug that forces iPhones Crashing From Simple Text Messages.Fri, 24 Apr 2020 00:00:00 GMTAppleApplicationiPhoneSMSVulnerabilityTheCISOhttps://cisotimes.com/docker-security-practices/https://cisotimes.com/docker-security-practices/A list of docker security practices for securely configuring your Docker containers and images.Thu, 23 Apr 2020 00:00:00 GMTApplicationContainerDockerImagesCybersecurityVulnerabilityDimitris Gkoutzamanishttps://cisotimes.com/warning-to-apple-users-possible-device-hack-by-just-sending-email/https://cisotimes.com/warning-to-apple-users-possible-device-hack-by-just-sending-email/Bugs were found in the Apple mail app which can allow RCE (Remote Code Execution), due to an out-of-bounds write bug and a heap overflow issue.Wed, 22 Apr 2020 00:00:00 GMTAppleExploitTheCISOhttps://cisotimes.com/personal-data-of-267-million-users-sold-by-hackers/https://cisotimes.com/personal-data-of-267-million-users-sold-by-hackers/Hackers have sold personal data from 267 Million Facebook users causing another major reputation blow on the tech giant.Tue, 21 Apr 2020 00:00:00 GMTFacebookPersonal DataVulnerabilityTheCISOhttps://cisotimes.com/zoom-videoconferencing-security-issues-were-known-to-dropbox/https://cisotimes.com/zoom-videoconferencing-security-issues-were-known-to-dropbox/Security vulnerabilities have been unveiled that could allow attackers to covertly control user's computers.Tue, 21 Apr 2020 00:00:00 GMTHackingTenableVulnerabilityZoomTheCISOhttps://cisotimes.com/defense-in-depth-the-layered-approach-to-cybersecurity/https://cisotimes.com/defense-in-depth-the-layered-approach-to-cybersecurity/Defense In Depth is a common terminology in modern day cybersecurity practices. It is a strategy that employs a series of mechanisms, to stop an attack on your organization.Fri, 17 Apr 2020 00:00:00 GMTApplication SecurityData SecurityDefence in DepthEndpoint SecurityNetwork SecurityPhysical SecuritySecure ArchitectureCybersecurityDimitris Gkoutzamanishttps://cisotimes.com/microsoft-offers-free-cybersecurity-service-protection-to-healthcare-staff/https://cisotimes.com/microsoft-offers-free-cybersecurity-service-protection-to-healthcare-staff/Recently numerous hospitals became the target of cyber attacks both in Europe and the United States. Microsoft decided to offer its security service AccountGuard for free to healthcare staff as well as human rights and humanitarian organizations.Wed, 15 Apr 2020 00:00:00 GMTCOVIDCybersecurityMicrosoftTheCISOhttps://cisotimes.com/nist-is-providing-online-cybersecurity-training-resources/https://cisotimes.com/nist-is-providing-online-cybersecurity-training-resources/The National Institute of Standards and Technology (NIST) has provided information and links to free and low-cost security training content.Tue, 14 Apr 2020 00:00:00 GMTCISOCybersecurityNISTTrainingTheCISOhttps://cisotimes.com/all-data-breaches-in-2019-2020/https://cisotimes.com/all-data-breaches-in-2019-2020/Many organizations, big and small, have suffered data breaches in 2019 and 2020. The breach details are shown in the table below.Mon, 13 Apr 2020 00:00:00 GMTData BreachTheCISOhttps://cisotimes.com/zoom-usernames-and-passwords-compromised-and-listed-on-dark-web-forum/https://cisotimes.com/zoom-usernames-and-passwords-compromised-and-listed-on-dark-web-forum/The Coronavirus crisis has forced many organizations to embrace "work from home". Zoom platform has become increasingly famous due to this, but also for itsMon, 13 Apr 2020 00:00:00 GMTExploitPasswordTheCISOhttps://cisotimes.com/microsoft-exchange-servers-still-unpatched-leaves-them-open-to-remote-code-execution-vulnerability/https://cisotimes.com/microsoft-exchange-servers-still-unpatched-leaves-them-open-to-remote-code-execution-vulnerability/Based on a Rapid7 survey more than 357 thousand Exchange Servers are vulnerable to a latest RCE vulnerability which allows an attacker to use an Exchange userWed, 08 Apr 2020 00:00:00 GMTMicrosoftVulnerabilityTheCISO