The NSA and CISA have released their findings on the “Top Ten Cyber Security Misconfigurations” to enhance national cybersecurity. The report, released on October 5, 2023, highlights security mistakes that organizations need to be aware of.
The report is important for public and private organizations that want to improve their defenses against cyber threats. The collaboration between the NSA and CISA is important because it shows the growing need to tackle cybersecurity challenges immediately.
By infosecbulletin
/ Thursday , September 19 2024
GitLab released patches for a critical flaw in Community and Enterprise Editions that could allow authentication bypass. The vulnerability in...
Read More
By infosecbulletin
/ Thursday , September 19 2024
On September 16, 2024, Globe Pharmaceuticals Ltd., a major pharmaceutical company in Bangladesh, was hit by a ransomware attack detected...
Read More
By infosecbulletin
/ Wednesday , September 18 2024
The FBI has alerted that cyber actors have compromised over 260,000 internet-connected devices, mainly routers, to form a large botnet...
Read More
By infosecbulletin
/ Wednesday , September 18 2024
Google has released Chrome 129 for Windows, Mac, and Linux users. The update will be available gradually over the next...
Read More
By infosecbulletin
/ Wednesday , September 18 2024
Broadcom has fixed a serious VMware vCenter Server vulnerability that allows attackers to execute remote code on unpatched servers through...
Read More
By infosecbulletin
/ Wednesday , September 18 2024
Ransomware groups like BianLian and Rhysida use Microsoft's Azure Storage Explorer and AzCopy to steal data from hacked networks and...
Read More
By infosecbulletin
/ Tuesday , September 17 2024
Apple has released iOS 18, the latest update for iPhones and iPads. Along with new features, it mainly focuses on...
Read More
By infosecbulletin
/ Tuesday , September 17 2024
CISA has warned Microsoft Windows MSHTML Platform Spoofing Vulnerability and Progress WhatsUp Gold SQL Injection Vulnerability actively exploited security flaws,...
Read More
By infosecbulletin
/ Tuesday , September 17 2024
Cybersecurity researcher Jeremiah Fowler found a non-password-protected database with 780,000 records from FleetPanda, a tech provider for dispatch management. The...
Read More
By infosecbulletin
/ Tuesday , September 17 2024
A recent dark web scan revealed that customer data from Dhaka Electric Supply Company Limited (DESCO) has been exposed. The...
Read More
The top ten cybersecurity misconfigurations highlighted in the report are:
1. Weak Passwords:
Weak password policies and the use of easily guessable passwords are still a problem.
2. Lack of Multi-Factor Authentication (MFA):
Not implementing MFA puts systems at risk of unauthorized access.
3. Unpatched Software:
Old software and vulnerabilities leave room for cyber attackers.
4. Excessive Permissions:
Giving users too many privileges can result in unauthorized access to data.
5. Poorly Configured Cloud Storage:
Incorrectly configured cloud storage can lead to data exposure and security breaches.
6. Insecure Network Services:
Running unnecessary or insecure network services increases the risk of being attacked.
7. Lack of System Backups:
Not having reliable backups can lead to data loss in cyber incidents.
8. Misconfigured Security Settings:
Incorrect security settings can cause unintended exposures.
9. Neglected Monitoring:
Insufficient monitoring and logging make it difficult to detect security incidents.
10. Inadequate Access Control:
Insufficient access controls can result in unauthorized access to important resources.