CISA.gov
FBI/CISA Warning: ‘Black Basta’ Ransomware Gang vs. Ascension Health
Richi Jennings | | #StopRansomware, Ascension, Benefits of healthcare software, Black Basta Ransomware, cisa, CISA Threat Update, CISA warning, CISA.gov, Conti, Conti Gang, Conti ransomware, Conti Ransomware Gang, exposed healthcare records, health care, health care organizations, Health Care Security, Health Insurance Portability and Accountability Act (HIPAA), healthcare, Healthcare company, Healthcare Compliance, Healthcare Compliance & Security, HIPAA, HIPAA Compliance, hipaa laws, NSA/CISA, RaaS, Ransomware, Ransomware-as-a-Service (RaaS), Russia, russia hacker, russia-based, russian, Russian Cyber War, Russian cybercrime, Russian government, Russian hacker, Russian hackers, Russian hacking, Russian malware, SB Blogwatch
Будет! Russian ransomware rascals riled a Roman Catholic healthcare organization ...
Security Boulevard
GitLab ‘Perfect 10’ Bug Gets a CISA Warning: PATCH NOW
Richi Jennings | | cisa, CISA Advisories, CISA Advisory, CISA Alert, CISA KEV, cisa known exploited vulnerabilities, cisa known exploited vulnerabilities catalog, CISA Threat Update, CISA warning, CISA.gov, CVE-2023-7028, CVSS10, Cybersecurity Infrastructure Security Administration, GitLab, GitLab Community Edition, GitLab CVE-2023-7028 CVE-2023-5356, GitLab Enterprise Edition, GitLab Patches, GitLab Security, GitLab Vulnerability, NSA/CISA, Password reset, Password reset protection, SB Blogwatch, software supply chain, software supply chain attack, software supply chain attacks, software supply chain risk, Software Supply Chain risks, Supply-Chain Insecurity
Password reset FAILURE: The U.S. Cybersecurity and Infrastructure Security Agency warns GitLab users of a 100-day-old, maximum severity vulnerability ...
Security Boulevard
Sisense Hacked: CISA Warns Customers at Risk
Richi Jennings | | Amazon Web Services (AWS), aws, AWS access keys, AWS bucket, cisa, CISA Advisories, CISA Advisory, CISA Alert, CISA warning, CISA.gov, depth, NSA/CISA, Sangram Dash, SB Blogwatch, Sisense
A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket. Government says victims include the “critical infrastructure sector.” ...
Security Boulevard
Biden Review Board Gives Microsoft a Big, Fat Raspberry
Richi Jennings | | Active Directory, Authentication, azure, Azure Active Directory, Azure AD, Azure security, cisa, CISA.gov, CSRB, Cyber Safety Review Board, Cybersecurity Infrastructure Security Administration, Entra ID, Exchange, Microsoft, Microsoft Azure, Microsoft Azure Active Directory, Microsoft Azure Security, Outlook.com, SB Blogwatch, Storm-0558
Storm-0558 forecast: Last year’s Chinese hack of federal agencies’ email is still a mystery, and “should never have occurred,” says CISA ...
Security Boulevard
Irony of Ironies: CISA Hacked — ‘by China’
Richi Jennings | | china, china espionage, Chinese, Chinese Communists, Chinese drive-by attack, chinese government, chinese hacker, Chinese hackers, Chinese state-sponsored hacking group, Chinese Threat Actors, CIRCIA, cisa, CISA.gov, CVE-2023-46805, CVE-2024-21887, CVE-2024-21893, Cyber Security and Infrastructure Security Agency, Cybersecurity & Infrastructure Security Agency, Cybersecurity and Infrastructure Agency, Data Stolen By China, federal agency, Ivanti, Ivanti Connect Secure, Ivanti Policy Secure, Ivanti security, Ivanti Vulnerabilities, Ivanti Zero day vulnerability, Ligolo, Magnet Goblin, NerbianRAT, NSA/CISA, Peoples Republic of China, SB Blogwatch, Volt Typhoon, WARPWIRE
Free rides and traffic jams: U.S. Cybersecurity and Infrastructure Security Agency penetrated in February, via vuln in Ivanti ...
Security Boulevard
First CSRB Report Tackles on Ongoing Log4j Risk
The Log4j vulnerabilities discovered in 2021 continue to pose significant risks to organizations worldwide. The Cyber Safety Review Board (CSRB) released a series of recommendations aimed at addressing that risk and underscoring ...
Security Boulevard
House Passes ICS Cybersecurity Training Act
In a predominantly bipartisan vote, the Industrial Control Systems Cybersecurity Training Act was passed by the House of Representatives on the evening of June 21, 2022. The bill, sponsored by Representative Eric ...
Security Boulevard
Russia’s Invasion of Ukraine and CISA/FBI’s New Era of Transparency
BLUF: Bottom Line Up FrontI want to start this post with the most important thing right up top:The CISA.gov/Shields-Up page starts with this statement. PLEASE take it seriously, and escalate to your ...
CISA, NSA Warn of Russian Attacks on Critical Infrastructure
After threat actors linked to Russia used multiple techniques to attack a wide variety of U.S. targets, the FBI, CISA and the NSA issued a joint warning to those tasked with protecting ...
Security Boulevard
US Treasury Again Threatens to Sanction Ransomware Victims
On September 21, 2021, the U.S. Treasury Department’s Office of Foreign Asset Control (OFAC) published an updated advisory to advise those who pay ransom to unknown threat actors who have stolen or ...
Security Boulevard