CyberSecurity

SEC Commissioner Signals Regulatory Changes are underway for Cybersecurity WHAT HAPPENED? SEC Chair Gensler spoke at Northwestern Pritzker School of Law’s Annual Securities Regulation Institute yesterday, where he focused on the Commission’s cybersecurity initiatives and a potential cybersecurity regulatory overhaul. Cybersecurity has been a long-standing priority for the SEC and the [...]

Phishing Via Gmail Accounts WHAT HAPPENED? A survey conducted by Barracuda surveyed 10,500 organizations and found that 35% of them had at least one bait attack email in September 2021 alone. Bait attacks are becoming more frequent, and it appears that bad actors who distribute this special kind of phishing email prefer [...]

Advisory on Russian Threats to Infrastructure WHAT HAPPENED? CISA, the FBI, and the NSA have released a joint cybersecurity advisory that gives oversight on Russian cyber operations including their observations on tactics, techniques, and procedures. WHAT DOES THIS MEAN FOR ME? These organizations are working together to help the [...]

Importance of Patching Log4j Flaw WHAT HAPPENED? The Federal Trade Commission (FTC) has warned U.S. organizations failing to secure customer data against Log4Shell zero-day vulnerability could face legal repercussions. The week of January 3rd, the consumer protection agency warned that the serious flaw in the Log4j logging library is being exploited [...]

STAYING VIGILENT DURING THE HOLIDAYS WHAT HAPPENED? While you are planning for holiday parties and traveling, malicious cyber actors are making different plans. Recently, CISA and the FBI have seen that this time of year is when these actors look to disrupt critical networks and systems belonging to organizations, businesses, and [...]

SonicWall Usage WHAT HAPPENED? SonicWall is strongly urging organizations that use SMA 100 series appliance to immediately patch them against multiple security flaws rated with CVSS scores ranging from medium to critical. If left unpatched, one of the vulnerabilities may be exploited to remotely takeover unpatched devices. [...]

Beware of BlackMatter WHAT HAPPENED? BlackMatter is ransomware-as-a-service tool that allows ransomware developers to profit from cybercriminal affiliates, such as BlackMatter actors, who deploy against victims. These actors have attacked numerous U.S. based organizations and have demanded ransom payments ranging from $80,000 to $15,000,000 in Bitcoin and Monero. BlackMatter may be [...]

Apple Device Updates WHAT HAPPENED? Apple owners: Time to update your software. Apple has uncovered evidence that attackers may be actively exploiting two vulnerabilities in company software to take over certain Apple devices, including iPhones.The company issued the security patches last week while warning the vulnerabilities could lead to remote code execution. [...]

Are Your Employees Being Recruited to Attack Your Firm? WHAT HAPPENED? Cybersecurity criminals are utilizing unconventional methods to breach company networks through ransomware attacks, which may even be carried out through the company's own employees. These scammers are offering a percentage of the ransom to employees who assist them with launching these [...]