The US Cybersecurity and Infrastructure Security Agency (CISA) has published guidance on how organizations can protect against phishing and other threats by implementing phishing-resistant multi-factor authentication (MFA) and number matching in MFA applications.
Hackers Stole Source Code, Personal Data From Dropbox Following Phishing Attack
Dropbox revealed on November 1 that it recently suffered a data breach where malicious actors gained access to some source code and personal information belonging to employees and customers.
Microsoft Patches Azure Cosmos DB Flaw Leading to Remote Code Execution
A missing authentication check vulnerability in Azure Cosmos DB could have allowed an attacker to execute arbitrary code remotely, Orca Security warns.
Azure Cosmos DB is a NoSQL database used on e-commerce platforms to store catalog data, and in order processing pipelines for event sourcing.
Anxiously Awaited OpenSSL Vulnerability’s Severity Downgraded From Critical to High
FTC Orders Chegg to Improve Security Following Multiple Data Breaches
The Federal Trade Commission (FTC) this week announced that it has reached an agreement with education technology provider Chegg over the company’s cybersecurity failures leading to several data breaches.
Bed Bath & Beyond Investigating Data Breach After Employee Falls for Phishing Attack
Bed Bath & Beyond revealed last week in an SEC filing that it recently suffered a data breach after an employee fell victim to a phishing attack.
US Gov Issues Supply Chain Security Guidance for Software Suppliers
The Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Office of the Director of National Intelligence (ODNI) this week released the second part of a three-part joint guidance on securing the software supply chain.
Engineering Workstations Used as Initial Access Vector in Many ICS/OT Attacks: Survey
Organizations are more confident in their ability to detect an OT breach
Musk Now Gets Chance to Defeat Twitter’s Many Fake Accounts
Twitter’s unending fight against spam accounts is now a problem for new owner Elon Musk, who pledged in April to defeat the bot scourge or “die trying!”
Bearer, Notebook Labs, Protexxa Raise Millions in Seed Funding
Bearer, Notebook Labs, and Protexxa, three cybersecurity startups dealing with data security, web3 identity, and enterprise cyber hygiene, respectively, have announced raising a combined total of over $10 million in seed funding.













