NetmanageIT CTO Corner (Page 486)

Sophos Firewall v20: Active Threat Response

Sophos Firewall v20: Active Threat Response

Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability

Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability

Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware

Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware

Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

This Cybersecurity Awareness Month, Don't Lose Sight of Human Risk

This Cybersecurity Awareness Month, Don't Lose Sight of Human Risk

1Password Becomes Latest Victim of Okta Customer Service Breach

1Password Becomes Latest Victim of Okta Customer Service Breach

www.darkreading.com

Meet Rhysida, a New Ransomware Strain That Deletes Itself

Meet Rhysida, a New Ransomware Strain That Deletes Itself

www.darkreading.com

Former NSA Employee Faces Life in Prison After Espionage Attempt

Former NSA Employee Faces Life in Prison After Espionage Attempt

www.darkreading.com

Do Small Companies Need Fractional AppSec Teams Akin to vCISOs?

Do Small Companies Need Fractional AppSec Teams Akin to vCISOs?

www.darkreading.com

Fireside Chat: Creating a Holistic Risk Mitigation Strategy

Fireside Chat: Creating a Holistic Risk Mitigation Strategy

Strengthening Oman's Economic Backbone

Strengthening Oman's Economic Backbone

www.darkreading.com

Cyberattacks on Kenya Drop in Third Quarter

Cyberattacks on Kenya Drop in Third Quarter

www.darkreading.com

It's Time to Establish the NATO of Cybersecurity

It's Time to Establish the NATO of Cybersecurity

Cybercriminals already operate across borders. Nations must do the same to protect their critical infrastructure, people, and technology from threats foreign and domestic.

Sophos ZTNA on Sophos Firewall is now available

Sophos ZTNA on Sophos Firewall is now available

ZTNA deployment couldn't be easier.

Ex-NSA Employee Pleads Guilty to Leaking Classified Data to Russia

Ex-NSA Employee Pleads Guilty to Leaking Classified Data to Russia

Ex-NSA employee pleads guilty to trying to transmit classified defense info to Russia, seeking $85,000 in exchange.

Cyberattackers Alter Implant on 30K Compromised Cisco IOS XE Devices

Cyberattackers Alter Implant on 30K Compromised Cisco IOS XE Devices

A seemingly sharp drop in the number of compromised Cisco IOS XE devices visible on the Internet led to a flurry of speculation over the weekend — but it turns out the malicious implants were just hiding.

Mageni Vulnerability and Attack Surface Management Platform.

How-To Articles

Mageni Vulnerability and Attack Surface Management Platform.

Mageni has been growing on me lately, and honestly I like it better than OpenVAS now. For those of you who followed my "OpenVAS howto", install article with the almighty Greenbone OpenVAS scanner, I think you will like this! Now, there are some pro's and cons

Freelance Market Flooded with North Korean IT Actors

Freelance Market Flooded with North Korean IT Actors

Organizations should be careful that the workers they hire on a freelance and temporary basis are not operatives working to funnel money to North Korea's WMD program, US DOJ says.

Why Do CVE Scores Need Real-World Context to Prioritize?

Why Do CVE Scores Need Real-World Context to Prioritize?

Ransomware actor exploits unsupported ColdFusion servers—but comes away empty-handed

Ransomware actor exploits unsupported ColdFusion servers—but comes away empty-handed

Multiple LockBit knock-off attacks in September targeting obsolete software foiled, exposing tactics and tools.

Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication

Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication

Microsoft has announced that it plans to eliminate NT LAN Manager (NTLM) in Windows 11 in the future, as it pivots to alternative methods for authentication and bolster security. "The focus is on strengthening the Kerberos authentication protocol, which has been the default since 2000, and reducing reliance on

New PEAPOD Cyberattack Campaign Targeting Women Political Leaders

New PEAPOD Cyberattack Campaign Targeting Women Political Leaders

European Union military personnel and political leaders working on gender equality initiatives have emerged as the target of a new campaign that delivers an updated version of RomCom RAT called PEAPOD. Cybersecurity firm Trend Micro attributed the attacks to a threat actor it tracks under the name Void Rabisu, which

Researchers Unveil ToddyCat's New Set of Tools for Data Exfiltration

Researchers Unveil ToddyCat's New Set of Tools for Data Exfiltration

The advanced persistent threat (APT) actor known as ToddyCat has been linked to a new set of malicious tools that are designed for data exfiltration, offering a deeper insight into the hacking crew's tactics and capabilities. The findings come from Kaspersky, which first shed light on the adversary

Ransomware attacks doubled year on year. Are organizations equipped to handle the evolution of Ransomware in 2023?

Ransomware attacks doubled year on year. Are organizations equipped to handle the evolution of Ransomware in 2023?

Ransomware attacks have only increased in sophistication and capabilities over the past year. From new evasion and anti-analysis techniques to stealthier variants coded in new languages, ransomware groups have adapted their tactics to bypass common defense strategies effectively. This article will cover just some of those new developments in Q3-2023

DarkGate Malware Spreading via Messaging Services Posing as PDF Files

DarkGate Malware Spreading via Messaging Services Posing as PDF Files

A piece of malware known as DarkGate has been observed being spread via instant messaging platforms such as Skype and Microsoft Teams. In these attacks, the messaging apps are used to deliver a Visual Basic for Applications (VBA) loader script that masquerades as a PDF document, which, when opened, triggers