CISA Order Highlights Persistent Risk at Network Edge

CISA Order Highlights Persistent Risk at Network Edge

The U.S. government agency in charge of improving the nation's cybersecurity posture is ordering all federal civilian agencies to take new measures to restrict access to Internet-exposed networking equipment. The directive comes ...
Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

It's not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware -- as opposed to just applying ...
3CX Breach Was a Double Supply Chain Compromise

3CX Breach Was a Double Supply Chain Compromise

We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX, a complex, lengthy intrusion that has the makings of a cyberpunk spy novel: North ...
Reading Mandiant M-Trends 2023

Reading Mandiant M-Trends 2023

The famous Mandiant 2023 M-Trends (NOT G-Trends, mind you…) report is out, and here are some of the things that I found to be surprising and NOT surprising :-)Mandiant M-Trends 2023 Detection by SourceSURPRISING“Mandiant ...
Microsoft (& Apple) Patch Tuesday, April 2023 Edition

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

Microsoft today released software updates to plug 100 security holes in its Windows operating systems and other software, including a zero-day vulnerability that is already being used in active attacks. Not to ...
Battle with Bots Prompts Mass Purge of Amazon, Apple Employee Accounts on LinkedIn

Battle with Bots Prompts Mass Purge of Amazon, Apple Employee Accounts on LinkedIn

On October 10, 2022, there were 576,562 LinkedIn accounts that listed their current employer as Apple Inc. The next day, half of those profiles no longer existed. A similarly dramatic drop in ...
Google Mandiant developers security culture

Google Acquires Cyberdefense Firm Mandiant for $5.4B

Tech giant Google is shoring up its cloud security offerings with the $5.4 billion acquisition of security advisory and incident response services specialist Mandiant.  The company’s dynamic cyberdefense solutions are delivered through ...
Security Boulevard
Mandiant is for Sale and Microsoft Should Get Serious with Enterprise Security

Mandiant is for Sale and Microsoft Should Get Serious with Enterprise Security

FireEye Failed, Mandiant is for Sale and it’s Time for Microsoft to Get Serious with Enterprise Security  An autopsy of FireEye’s missteps and why Microsoft should acquire Mandiant and create a security ...
Security Boulevard