InfoSecBulletin Cybersecurity for mankind
Organizations across all sectors and of all sizes are too frequently impacted by damaging ransomware incidents. Many of these incidents are perpetrated by ransomware threat actors using known vulnerabilities.
By urgently fixing these vulnerabilities, organizations can significantly reduce their likelihood of experiencing a ransomware event. In addition, organizations should implement other security controls as described on stopransomware.gov.
BIG VULNERABILITIES IN NEXT-GEN BIG-IP
UK confirms Ministry of Defence payroll data exposed in data breach
LockBit Ransomware Leader Unmasked and Sanctioned
Samsung mobile devices 25 flaws patched
Bangladesh to make law to protect customers using electronic currency
Outpost24 report
Cybersecurity Loopholes in Paris 2024 Olympics Infrastructure
Xiaomi Android Devices Hit by Multiple Flaws
LockBit’s seized darknet site resurrected by police, teasing new revelations
GAO: NASA Faces ‘Inconsistent’ Cybersecurity Across Spacecraft
Moshiul Islam accepted as member to Forbes Technology Council
However, most organizations may be unaware that a vulnerability used by ransomware threat actors is present on their network. Through the Ransomware Vulnerability Warning Pilot (RVWP), which started on January 30, 2023, CISA is undertaking a new effort to warn critical infrastructure entities that their systems have exposed vulnerabilities that may be exploited by ransomware threat actors
As part of RVWP, CISA leverages existing authorities and technology to proactively identify information systems that contain security vulnerabilities commonly associated with ransomware attacks. Once CISA identifies these affected systems, our regional cybersecurity personnel notify system owners of their security vulnerabilities, thus enabling timely mitigation before damaging intrusions occur.
CISA accomplishes this work by leveraging its existing services, data sources, technologies, and authorities, including CISA’s Cyber Hygiene Vulnerability Scanning service and the Administrative Subpoena Authority granted to CISA under Section 2209 of the Homeland Security Act of 2002.
