Explore

FactFable FactFable
Why Data loss prevention for a federal agency Matters More in Cloud Environments

Why Data loss prevention for a federal agency Matters More in Cloud Environments

As U.S. federal agencies move to the cloud, the risk of data loss increases. Here's why data loss prevention (DLP) is more critical than ever.
Trendline Trendline
Security Experts Urge Immediate Action on Post-Quantum Cryptography Transition

Security Experts Urge Immediate Action on Post-Quantum Cryptography Transition

Security Experts Urge Immediate Action on Post-Quantum Cryptography Transition
Trendline Trendline
Cyber Espionage Targets Stock Exchange Executive's Email in Prolonged Attack

Cyber Espionage Targets Stock Exchange Executive's Email in Prolonged Attack

Cyber Espionage Targets Stock Exchange Executive's Email in Prolonged Attack
FactFable FactFable
How Email security for a federal agency Quietly Shapes Modern Security Architecture

How Email security for a federal agency Quietly Shapes Modern Security Architecture

A seemingly obscure government mandate to fix federal email security ended up creating a blueprint for the entire private sector.
Rapid Read Rapid Read
CISA Warns of Exploited Linux Kernel Vulnerability Affecting Container Security

CISA Warns of Exploited Linux Kernel Vulnerability Affecting Container Security

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a vulnerability in the Linux kernel, specifically affecting container security. The vulnerability, identified as CVE-2022-0492, has a CVSS score of 7.8 and is classified as an improper authentication flaw. It allows attackers to elevate privileges and bypass namespace isolation, which is crucial for container security. The flaw is located in the cgroups feature of the Linux kernel, which is responsible for resource allocation among process groups. Only the first version of cgroups is affected. The vulnerability enables attackers to modify the release_agent file in the cgroup hierarchy, potentially allowing malicious scripts to run as root, leading to container escapes and privilege escalation. Although the technical details of this vulnerability were published three years ago, its active exploitation was only recently reported, prompting CISA to add it to its Known Exploited Vulnerabil...
FactFable FactFable
How Future of public key cryptography Quietly Underpins Most Software You Use

How Future of public key cryptography Quietly Underpins Most Software You Use

Learn how public key cryptography secures your digital life and why experts are racing to build a new generation of defenses against future threats.
Reuters Reuters
US FCC plans tighter rules that will help US firms in undersea internet cable market

US FCC plans tighter rules that will help US firms in undersea internet cable market

By David Shepardson WASHINGTON, June 3 (Reuters) - The Federal Communications Commission said on Wednesday it plans to toughen oversight of submarine communications cables that handle ‌99% of international internet traffic, proposing rules that will make it harder for Chinese companies to provide
FactFable FactFable
What Data security: detecting threats early Actually Looks Like in a Real Incident

What Data security: detecting threats early Actually Looks Like in a Real Incident

A minute-by-minute look inside a real cyber incident reveals how security teams move from a single alert to containing a major threat before it's too late.
FactFable FactFable
How crypto theft insurance considerations for US businesses Quietly Shapes Modern Security Architecture

How crypto theft insurance considerations for US businesses Quietly Shapes Modern Security Architecture

Discover how the rigorous demands of crypto theft insurance are quietly forcing U.S. businesses to adopt a new, more robust security architecture.
Rapid Read Rapid Read
Five Eyes Intelligence Agencies Warn of Chinese Espionage via LinkedIn

Five Eyes Intelligence Agencies Warn of Chinese Espionage via LinkedIn

The Five Eyes intelligence alliance, comprising the United States, United Kingdom, Canada, Australia, and New Zealand, has issued a joint warning about Chinese espionage activities targeting professional networking sites like LinkedIn. According to the bulletin, Chinese intelligence operatives are posing as consultants and HR professionals to recruit individuals with access to sensitive information. The aim is to gain military, political, and economic intelligence that could provide China with strategic advantages. The warning highlights cases where individuals have been prosecuted for sharing sensitive information, emphasizing the risks posed to national security.
Trendline Trendline
Cybersecurity Experts Highlight Common Mistakes in Tabletop Exercises Impacting Incident Response

Cybersecurity Experts Highlight Common Mistakes in Tabletop Exercises Impacting Incident Response

Cybersecurity Experts Highlight Common Mistakes in Tabletop Exercises Impacting Incident Response
Rapid Read Rapid Read
Russian Hackers Exploit Home Routers Across 23 U.S. States, Prompting Security Measures

Russian Hackers Exploit Home Routers Across 23 U.S. States, Prompting Security Measures

A unit of Russia's military intelligence agency, known as APT28, has been exploiting vulnerabilities in home routers across 23 U.S. states. The group, responsible for previous high-profile cyberattacks, used unpatched firmware and default passwords to compromise thousands of devices, redirecting internet traffic through Russian-controlled servers. This operation, identified as a Domain Name System hijacking, allowed the hackers to intercept and harvest user credentials. Federal agents disrupted the operation in April, but the underlying vulnerabilities remain. Government agencies are urging users to update router firmware and change default login credentials to protect against future attacks.