Blog

Over the past three years, the second Tuesday of each month has turned into a hectic period of planning and remediation, driven by a 25% average annual growth rate in CVEs. Just last Tuesday, Microsoft revealed a critical TCP/IP remote code execution (RCE) vulnerability in the IPv6 stack, which has a CVSS score of 9.8 […]

The stereotype of IT security as the ‘gatekeeping’ department has run its course. Here are five ways to shift how cybersecurity teams are perceived. In a never-ending effort to do their job and secure their environments, cybersecurity teams often bear the brunt of negative perceptions, labelled as the department of ‘No.’ “No” to admin privileges, […]

We examine the new NIST Zero Trust draft guidance with links to review. See how to contribute during the comment period.

The current state of OT/IOT security is being repainted with a new coat of risk. The shade of color? Cellular routers and the vulnerabilities within firmware. In our new report with Finite State, our joint research explores the risks organizations face within the software supply chains of OT/IoT routers. Hardware has firmware – operational software […]

In the last few weeks, there have been a few announcements made about a new malware threat known as FrostyGoop or BUSTLEBERM (as it was originally tracked by Mandiant). It is being recognized as the first custom malware to integrate Modbus for the purpose of causing physical damage. An associated incident has been reported where […]

Update as of August 1, 2024 A year and a half after our original research, ransomware groups have continued to increase attacks targeting ESXi virtualization environments. Here are two of the main developments: New groups are developing ESXi encryptors The trend that started after Babuk’s source code leak in 2021 and led to the events […]

Ransomware risk is top of mind for citizens and CISOs alike. From the board room to the room known as the ‘SOC’, everyone is feeling the pain of disruption. Being locked out of a system and forced back to pen and paper is shocking to our working lives. Too often, it is delaying a much-needed […]

No one feels the pain of ransomware and other disruptive and costly digital cybersecurity attacks more than the people managing the day-to-day in your SOC (Security Operations Center). At 13 attacks every second in 2023, cybercriminals, fraudsters and nation-state hacktivists are overwhelming SOC analysts.  Nearly two-thirds (63%) of SOC analysts report the size of the […]

Early this morning, on July 19th, CrowdStrike reported a major outage caused by an update to the Falcon sensor. The issue was confined to the Windows operating system but led to  a system crash, causing significant business   disruption and frustration across multiple sectors. CrowdStrike has since rolled back the update, but affected systems will need […]