Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Responding to the Critical MOVEit Transfer Vulnerability (CVE-2023-34362)

On May 31, 2023, Kroll received multiple reports that a zero-day vulnerability in MOVEit Transfer was being actively exploited to gain access to MOVEit servers. Kroll has observed threat actors using this vulnerability to upload a web shell, exfiltrate data and initiate intrusion lifecycles. This vulnerability may also enable a threat actor to move laterally to other areas of the network.

CTI Roundup: Microsoft Finds a macOS Bug That Lets Hackers Bypass SIP Root Restrictions

Improved BlackCat ransomware variant strikes with lightning speed in stealthier attacks, Microsoft finds a macOS bug that lets hackers bypass SIP root restrictions, and Dark Pink hackers continue to target government and military organizations.

Look both ways: Preventing suspicious behavior with end-to-end detections

In the rapidly evolving digital landscape, malicious actors constantly adapt their strategies to infiltrate our systems. Traditional endpoint detection mechanisms are no longer sufficient to protect our applications and workloads against advanced threats. To effectively address this concern, it has become imperative to embrace a broader approach to threat detection. This entails a paradigm shift towards incorporating both agent-based and agentless detection methods.

Sysdig Enriched Process Trees, an Innovative Approach to Threat Detection

Discover how Sysdig Secure’s new Process Tree feature improves threat investigation. Imagine you’re investigating a security related detection, the investigation was triggered by the execution of stat/etc/shadow in one of your containers. Is this a sign of a legitimate activity, such as a developer debugging an app, or a sign that your container has been compromised? It depends on the context.

3 Reasons to Leverage AI for Enhanced Threat and Vulnerability Management

As the cyber threat landscape continues to evolve, you know there’s a growing need to ensure applications and software are protected from malicious actors. A holistic and intelligent approach to threat and vulnerability management is essential for ensuring security against modern cyber risk. By leveraging AI-powered tools, especially for tasks like remediating security flaws, you can manage and reduce risk quickly and effectively.

Improving Cyber Resilience: How Logsign Unified SO Platform Outshines SIEM, SOAR, and XDR

What are the key differences between SIEM, SOAR, XDR & Logsign Unified SO Platform? SIEM, SOAR, XDR and Logsign USO Platform are all cybersecurity technologies that help organizations detect, investigate, and respond to cyber threats. However, they differ in their scope, capabilities, and focus. Here are the key differences between them.

What is SSDLC (Secure Software Development Lifecycle) and 6 Steps to Take Now

The pressure to ship software faster to meet market demands is compromising security in a big way. As cyber criminals find ways to use the glaring disconnect between developers and security policies, companies consider security a necessity rather than a compliance measure. As a result, 2022 studies show that 68% of companies are shifting towards security and making developers share responsibility for a secure software development lifecycle.

Digital Aadhaar KYC: How Aadhaar Plus provides KYC compliant Aadhaar Verification

IDcentral’s flagship Aadhaar Card Verification product offers an advanced solution for seamless KYC (Know Your Customer) journeys, ensuring a seamless and hassle-free experience for end users. We understand that clients may encounter occasional service disruptions, which can affect the OKYC (Offline KYC) and e-KYC (Electronic KYC) processes.

How to Record and Monitor RDP Sessions with Ekran System [Hands-on Guide]

Monitoring remote desktop protocol (RDP) connections to your infrastructure is essential for maintaining a secure IT environment and managing insider risks. Additionally, recording remote user activity on your organization’s servers and other critical endpoints is often a requirement of cybersecurity laws and regulations. This article will guide you on how to monitor RDP connections to your infrastructure server, Jump server, Citrix server, or any other endpoint with Ekran System Client installed.