Information Security Media Group (ISMG)’s Post

With the sheer level of unpatched businesses being mindblowingly high as I type this, all my #cto #cio #ciso connections, for all those not aware this ´Citrixbleed´ is a howler with widespread exploitation of a critical vulnerability in Citrix NetScaler systems. Its now clear this flaw is allowing unauthenticated attackers to extract sensitive data and compromise networks globally. Its hit Boeing, ICBC, and a few other notable businesses. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued advisories urging immediate patching of this vulnerability, we aren´t a NetScaler shop, but trying to spread the word on this P0 security moment in our community. Shout and share please! More details, here: https://shorturl.at/hilL2 #CyberSecurity #InfoSec #DataBreach #CitrixBleed

CrowdStrike's recent outage, attributed to a faulty software update, impacted numerous businesses and essential services, underscoring the significance of a reliable cybersecurity partner. The incident emphasizes the need for a provider with a steadfast commitment to stability and robust contingency plans to ensure uninterrupted operations. 💼 When downtime can translate to financial losses, choosing the right cybersecurity partner is crucial. At WIT ONE, we collaborate with industry-leading cybersecurity experts, bringing 30 years of experience to the table. Let us support you in safeguarding your business with top-notch cybersecurity solutions. 🔒 #WITONE #Cybersecurity #Outage Read more about the CrowdStrike outage here: [Link to the article] 📰🔗

⚠️ Potential Data Breach at Zscaler ⚠️ ➡️ A hacker claims to have sold access to Zscaler's systems and data. ➡️ Zscaler is investigating the claim but has not found any evidence of a breach so far. ➡️ The hacker claims that the access includes sensitive data. ➡️ Zscaler says that it takes all threats seriously and is continuing its investigation. #Zscaler #dataBreach #cybersecurity

Protecting Organizations in the Face of Cyber Threats In the wake of recent security incidents, such as the breach experienced by Xfinity, the importance of advanced email security cannot be overstated. Six Degrees Consulting is proud to collaborate with Avanan, a leading cybersecurity solution, to help organizations fortify their defenses. The Xfinity Incident: What Happened? Comcast recently informed Xfinity customers about a data security incident, emphasizing the need for robust cybersecurity measures. Unauthorized access led to the theft of sensitive customer information, highlighting the evolving nature of cyber threats. How Avanan and Six Degrees Can Help: At Six Degrees Consulting Degrees, we understand the urgency of proactive cybersecurity. Our partnership with Avanan, a Check Point Company brings cutting-edge email security solutions to organizations, preventing unauthorized access and data breaches. Trusted Partnerships: We are pleased to be in collaboration with Avanan and Check Point Software Technologies Ltd, combining our expertise to deliver comprehensive cybersecurity solutions. Together, we offer a holistic approach to safeguarding your organization's digital assets. Take Action: Schedule a Demo! Don't wait for a security incident to prompt action. Six Degrees Consulting is excited to offer personalized demos, showcasing how Avanan, in partnership with Six Degrees, can elevate your cybersecurity defenses. 📧 Click here:https://lnkd.in/g73NUUy9 to schedule a demo and prioritize your organization's security. Your peace of mind is our mission! 💼🔐 #Cybersecurity #EmailSecurity #DataProtection #Avanan #SixDegrees #CheckPoint #Demo https://lnkd.in/gvTn3EuN

Human error?🤷♂️ Lack of quality control?🔓 Imbedded cyber attack? 💻 The reason behind today's "blue screen of death" scaling across every industry globally has yet to be determined - but one thing is certain. The road to recovery is going to be complex, time-consuming, and anything but simple. https://lnkd.in/esFmqgZj #networking I #security I #cybersecurity I #transportation I #financialservices

🚨 CrowdStrike Incident Update: A Cautionary Tale in Cybersecurity 🚨 In the ever-evolving landscape of cybersecurity, the recent incident involving CrowdStrike serves as a stark reminder of the critical nature of rigorous testing and quality assurance before the deployment of software updates. The unexpected crash caused by a problematic update has led to considerable disruptions across the globe, bringing many business operations to a standstill. 🖥️💥 It is essential to acknowledge that even the most dependable systems are not immune to unforeseen complications. In this scenario, a coding oversight led to a cascade of blue screens of death (BSOD), leaving a trail of significant repercussions for IT infrastructures around the world. CrowdStrike has been proactive in addressing the issue, and while there are partial workarounds for some clients, a comprehensive solution is still in the works. The gravity of this incident brings to light the importance of continuously updating disaster recovery strategies and being prepared for such unpredictable events. The swift and coordinated efforts of cybersecurity professionals are crucial in these moments. As a cybersecurity analyst, I am optimistic about a quick resolution to the problems faced by the affected systems and extend my gratitude to all the dedicated individuals working tirelessly to alleviate the fallout from this incident. 💪🔧 Stay tuned for more updates and insights on how to safeguard your systems against similar occurrences. #CyberSecurity #TechUpdates #CrowdStrike #SystemFailures #BSOD #ITSupport #ResilienceInTech 🚀🔒🛠️

Good morning all, Hope the week has treated you well. Here we have another cyberattack on a large organization. "The threat actor gained access to their file systems, causing the company to initiate incident response protocols". They then had to receive assistance from an external cybersecurity council and consultants to contain and investigate the incident, which included shutting down the Targus network, causing temporary, but nonetheless business disruption to stop the spread of the attack.   "Companies commonly shut down IT systems in response to a cyberattack to prevent the spread of the attack to other servers and devices. However, this also prevents legitimate access to internal applications and data, temporarily disrupting business operations while servers and workstations are restored as necessary." There has been no disclosure of whether or not data was stolen, but based on recent statistics, 89% of attacks have a data theft component to it. So, they aren't aware of exactly what files were affected, they respond after the attack happened by hiring external help because their internal systems didn't help them, and the attack indirectly shut down their network because they didn't want the incident to spread.  This is why the RackTop Systems BrickStor solution was created. We are: - Patented Active Defense Capability with incident management and rapid remediation. - Detect and stop insider threats, data theft, and ransomware - User Behavior Auditing with integrated investigation interface - Privileged user monitoring - Data-centric Zero Trust Architecture - Cybervaulting capability for data attestation and isolated recovery - Block Storage Agnostic - Integrated compliance reports for CJIS audits and compliance - Integrates with existing infrastructure and security tools We can alert when an attack occurs, take action to prevent damage from spreading, indicate what files were affected, as well as remediation/recovery procedures. Feel free to reach out to me to learn more about us, and prevent your company from making the bleeping computer website. #data #datatheft #NIST #ransomware #cybersecurity #cyberresilience #insiderthreat #recovery # https://lnkd.in/eHzV2uNd

Following news of cybersecurity vendor CrowdStrike’s faulty software update creating global disruptions, Forrester Principal Analyst Allie Mellen explains how, for the vendor to restore trust, there will need to be a deeper look at what occurred and what changes can be made to prevent it from happening again. #security

Following news of cybersecurity vendor CrowdStrike’s faulty software update creating global disruptions, Forrester Principal Analyst Allie Mellen explains how, for the vendor to restore trust, there will need to be a deeper look at what occurred and what changes can be made to prevent it from happening again. #security

Sad but true: best way of convincing people in your organization to adopt better security measures is to have them get hacked. 🚩 VAST MAJORITY OF ATTACKS ARE NOT TECHNICALLY SOPHISTICATED. I've seen way too often that organisations were investing in incredible solutions to protect their networks, while they've excluded their top management from MFA requirement because 'they cannot be bothered with this'. 🚩 If a C-level executive or other decision maker wants to be excluded from such a basic, but insanely important protection measure, it should be a big red flag: they clearly don't understand how important their position is. And if they don't understand that - how can they execute on their tasks successfully? #security #mfa #azure #microsoft #noshortcuts