Categoria: Incident Response

Shadowserver Starts Conducting Daily Scans to Help Secure ICS

The Shadowserver Foundation this week announced that it has started conducting daily internet scans in an effort to identify exposed industrial control systems (ICS) and help organizations reduce their exposure to attacks.

MDR Vendor eSentire Banks $325M at ‘Unicorn’ Valuation

Canadian cybersecurity vendor eSentire has scored $325 million in new financing at a heady valuation north of a billion dollars.

Wiper Used in Attack on Iran National Media Network

An analysis of a January attack targeting Iran’s national media corporation has found the use of multiple malware families, including a data-wiper and custom backdoors.

Coinbase Pays $250K for ‘Market-Nuking’ Security Flaw

Cryptocurrency exchange Coinbase has shelled out its largest ever bug bounty payment — a quarter of a million dollars — for what was described as a “market-nuking” security flaw that could have allowed users to sell bitcoins they didn’t own.

European Cybersecurity Agencies Issue Resilience Guidance for Decision Makers

The European Union Agency for Cybersecurity (ENISA) and the European Union’s Computer Emergency Response Team (CERT-EU) last week published a set of best practices to help organizations boost their cyber resilience.

CISA Creates List of Free Cybersecurity Tools and Services for Defenders

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday announced that it has compiled a list of free cybersecurity tools and services that can help organizations reduce risk and improve resilience.

Russian Cyberspies Stole U.S. Defense Data in Attacks on Contractors

Cleared defense contractors working with the United States government have been targeted by Russian cyberspies whose goal is to obtain sensitive defense and intelligence data, according to an advisory issued on Wednesday by U.S. agencies.

Backup Plays Key Role in Ransomware Response, But Not a Complete Solution

Ransomware attacks have increased in volume, sophistication and ransom demanded consistently over the last few years. According to published records, the education and retail industries are the most targeted.

Google Offering $91,000 Rewards for Linux Kernel, GKE Zero-Days

Technology giant Google is offering bigger cash awards for hackers reporting critical security flaws affecting the Linux Kernel, GKE, Kubernetes, and kCTF.

Legit Security Raises $30M to Tackle Supply Chain Security

A team of Israeli entrepreneurs with roots in the application security ecosystem is taking a stab at software supply chain security with big backing from Bessemer Venture Partners.