A new report from Mandiant indicates that 70% of 2023's total of 138 exploited vulnerabilities were zero-days when first used, with the average time-to-exploit (TTE) dropping drastically from 32 days to just five.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Cisco has launched a data breach investigation and pulled its development portal offline after a hacker listed the company’s infrastructure information on a hacking forum.
Welcome to Hack-tober, or as it's officially known, Cybersecurity Awareness Month – a great time for your business to review policies and procedures to mitigate against cyberattacks.
Researchers at Shanghai University used the D-Wave quantum computer to demonstrate decryption of a working RSA public key. The incident does demonstrate that the timeline to crack encryption that is not quantum-resistant, something that many feel is still at least 10 years off, may be shorter than expected.
Cybersecurity data breaches are near constant, placing immense pressure on security teams. We hear the word ‘burnout’ quite often but what is overlooked is the root cause.
Marriott International has approved a $52 million FTC settlement to conclude an investigation into over half a decade of data breaches that rocked the hotel franchise.
A data breach affecting debt collection agency FBCS has impacted over 230,000 Comcast Customers, long after the telecom giant terminated the recovery firm’s services.
The Internet Archive has been under heavy attack in the past week, suffering both a major data breach and a series of potent DDoS attacks that have taken it offline.
A cyber attack struck American Water, the largest US publicly traded water utility, forcing the facility to shut down some systems, including the MyWater customer portal.
A new research report from ESET finds that the "GoldenJackal" advanced persistent threat group has the capability to compromise air-gapped systems, and has been deploying it in Europe since at least 2022.










