Thursday , April 24 2025

infosecbulletin

CISA Finalizes Microsoft 365 Secure Configuration Baselines

microsoft 365

CISA started the SCuBA project to improve the security of email and cloud environments in the federal government. The project aims to enhance the security features of commonly used products and services and provide better visibility at the enterprise level to support our cybersecurity goals. This meant creating secure configurations …

Read More »

Daily Cybersecurity update, December 27, 2023

update

Cyberattacks and data breaches are still happening, causing harm to organizations and their confidential information. Recently, Yakult was attacked and had 95GB of stolen data leaked. LoanCare, a subsidiary of Fidelity National Financial, also had a data breach affecting over one million people. In Michigan, a healthcare firm had a …

Read More »

Warning: Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining

Coding

AhnLab’s Security Emergency Response Center (ASEC) studies attacks on poorly secured Linux SSH servers and shares the findings on the ASEC Blog. Attackers need to find out the IP address and SSH account details before installing malware like DDoS bot and CoinMiner. They scan for servers with the SSH service …

Read More »

Barracuda fixes new ESG zero-day exploited by hackers

Barracuda

Barracuda, fixed a zero-day bug on December 21. The bug was used by hackers known as UNC4841 to exploit Email Security Gateway (ESG) appliances. The company released additional security updates the following day for compromised ESG appliances that were attacked with SeaSpy and Saltwater malware. A security vulnerability was disclosed …

Read More »

Cisco to Acquire Networking and Security Startup Isovalent

Cisco

Cisco to acquire Isovalent, a company that specializes in cloud networking and security. Isovalent has been instrumental in developing eBPF, an open-source technology that allows developers to analyze the operating system layer for both Linux and Windows. ALSO READ: Tackling cloud security challenges head-on Isovalent’s Cilium is an open-source initiative …

Read More »

Tackling cloud security challenges head-on

Cloud security

Cloud security is very important for modern computing. Businesses and individuals use cloud services more and more to store, process, and manage data. Cloud computing has many advantages, such as scalability, flexibility, and cost efficiency, but it also brings new security challenges to make sure sensitive information stays confidential, intact, …

Read More »

Corvus Insurance report
Record-Breaking Ransomware Month: November Up 110%

Ransomware

Ransomware groups made a strong comeback in November, with the highest number of recorded victims ever, according to Corvus Insurance. Corvus Threat Intel reported that there were 484 new ransomware victims posted on leak sites in November 2023. This represents a 39.08% increase from October and a 110.43% increase compared …

Read More »

Factors to shape unified data storage in 2024

data storage

Data Complexity Report by NetApp highlights that an astonishing 98% of organizations worldwide are undertaking this transformative journey. Three out of four companies still rely on on-premises data storage, highlighting the continued significance of having infrastructure within the organization. In the future, it is important to have a single data …

Read More »