Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
 |
2021-07-26 12:01:59 |
Malicious Life Podcast: The Life and Exploits of Albert Gonzales Part 3 (lien direct) |
In this third installment of the series (Part 1, Part 2), we come back to the story in early 2007 when a Secret Service agent operating out of San Diego takes a flight halfway across the world. He's going to meet with Europe's most prolific stolen credit card salesman. It is this meeting that will be the beginning of the end for Albert Gonzalez and his 'All Star' crew of hackers, international businessmen and mules. |
|
|
|
 |
2021-07-22 13:06:52 |
CISO Stories Podcast: Protecting the Crown Jewels (lien direct) |
The crown jewels are those assets representing the highest value to the organization and deserve the greatest investment to protect. Join this podcast with special guest Steve Durbin, Chief Executive at ISF, to learn the importance of protecting these assets throughout the information life cycle - check it out... |
|
|
|
 |
2021-07-22 12:00:00 |
Cybereason and CYDERES Partner to Deliver Managed Detection and Response (lien direct) |
Cybereason is thrilled to announce a strategic partnership with CYDERES, the security-as-a-service division of Fishtech Group and a Top 25 MSSP, to bring enhanced Managed Detection and Response (MDR) to our current and future managed security customers. |
|
|
|
 |
2021-07-21 20:34:32 |
Everything Cybereason at the Black Hat 2021 Virtual Conference (lien direct) |
The Cybereason team is excited to have you join us at Black Hat 2021 on August 4th from 8:30AM to 5PM PST, and on August 5th from 8:30AM to 4PM PST! Stop by the “virtual” Cybereason booth and automatically be entered to win a Sonos Roam Speaker and other great freebies! |
|
|
|
 |
2021-07-21 13:43:27 |
Three Ransomware Attacks that Upped the Ante (lien direct) |
Concern surrounding ransomware attacks is high in the security industry. In our recent global research report titled Ransomware: The True Cost to Business, we found that 81% of the 1,200+ cybersecurity professionals we surveyed were highly or very concerned about the risk of ransomware. |
Ransomware
|
|
|
 |
2021-07-20 09:00:00 |
Cybereason Enhances XDR Offering with empow Acquisition (lien direct) |
Today's targeted attacks increasingly take aim at multiple devices and users simultaneously while employing a range of tactics, techniques and procedures (TTPs). To further complicate the work of the defender, traditional security solutions are alert-centric, generating an ever-growing volume of notifications that lack context and fail to correlate to one another even if part of the same attack. This alert-centric, siloed approach gives attackers ample opportunity to hide in the seams, which makes hunting, tracking and eliminating attackers all but impossible. |
|
|
|
 |
2021-07-19 12:04:11 |
Malicious Life Podcast: Dave Kennedy on the History of DerbyCon (lien direct) |
DerbyCon was conceived with the notion that it was going to be all about making the security community a family. Dave Kennedy, one of the founders of DerbyCon, talks about the unique vibe of the conference, his fear of clowns, and why he'll never listen to a Busta Rhymes album again - check it out… |
|
|
|
 |
2021-07-15 12:15:00 |
Cybereason vs. Prometheus Ransomware (lien direct) |
Prometheus is a relatively new variant of the Thanos ransomware that is operated independently by the Prometheus group, and was first observed in February of 2021. In just a short period of time, Prometheus caused a lot of damage, and breached over 40 companies. |
Ransomware
|
|
|
 |
2021-07-15 12:00:00 |
CISO Stories Podcast: Always be a Student - Always be Learning (lien direct) |
Phil Attfield, CEO and founder at Sequitur Labs, discusses his engineering roots and the natural curiosity that led him to developing software tools and in-house products for modeling, synthesis and verification of telecom and network equipment hardware at Nortel. |
|
|
|
 |
2021-07-14 12:46:09 |
Cybereason Extends Global Leadership in XDR with $275 Million in Crossover Financing (lien direct) |
The first half of 2021 has seen explosive growth for our company, and the tremendous momentum we are enjoying is just the beginning of what will prove to be a momentous year for the entire Cybereason team. |
Guideline
|
|
|
 |
2021-07-13 12:58:13 |
Cybereason Launches Global Defenders League Partner Program (lien direct) |
The Cybereason team is excited to announce the launch of the Cybereason Defenders League, a Global Partner community, designed to reward the cybersecurity industry's most trusted advisors and solution providers by increasing their margins and profitability. Members of this program will gain access to award-winning technology and services to help end users stop cyber attacks. |
|
|
|
 |
2021-07-12 18:56:52 |
CISO Roundtable: Ransomware Attacks and the True Cost to Business (lien direct) |
A recent global research report conducted by Cybereason, titled Ransomware: The True Cost to Business, revealed that the vast majority of organizations that have suffered a ransomware attack have experienced significant impact to the business, including loss of revenue, damage to the organization's brand, unplanned workforce reductions, and little in the way of relief from cyber insurance policies. |
Ransomware
|
|
|
 |
2021-07-12 12:06:30 |
Malicious Life Podcast: The Life and Exploits of Albert Gonzales Part 2 (lien direct) |
In this second installment of the series (listen to Albert Gonzales Part 1 here), Gonzales is working with the Secret Service and apparently doing an outstanding job. He was such a good employee, in fact, that they had him doing seminars for staff and speaking at government-run conferences. At one point he met personally with the (then) Director of the Secret Service where Gonzales gave a presentation and even got to shake the Director's hand. |
|
|
|
 |
2021-07-11 20:30:00 |
Cybereason and Doosan Corp Partner to Secure APAC Enterprises (lien direct) |
Cybereason is excited to announce a partnership with South Korean multinational conglomerate and Global Fortune 2000 leader the Doosan Corporation (Doosan Digital Innovation, or DDI) to protect enterprises from sophisticated cyberattacks on endpoints and across their networks. |
Guideline
|
|
|
 |
2021-07-09 14:32:29 |
Summer Webinar Series with CSO Sam Curry (lien direct) |
Join Cybereason CSO Sam Curry for this webinar series where he revisits some of the cybersecurity highlights of the first half of 2021, from the SolarWinds supply chain attacks to DarkSide and other major ransomware operations.
In this series, Sam covers not just the problems confronting defenders so far this year but also the state of play for major ransomware operations, as well as a look at emerging solutions like XDR (Extended Detection and Response) that are designed to reverse the adversary advantage and return the high ground to the defenders.
Register now for one or all of this fascinating summer webinar series: |
Ransomware
|
|
|
 |
2021-07-08 13:29:54 |
CISO Stories Podcast: CISO Business Enablement - Getting to Yes (lien direct) |
The CISO is often in a position where vulnerabilities are known and implementing a solution may result in an insecure posture. Should the CISO say 'no we can't do that' or 'figure out how to make it happen'? |
|
|
|
 |
2021-07-07 20:27:43 |
REvil Ransomware Attacks: Implications for Kaseya, MSPs and Businesses (lien direct) |
In some ways, the ransomware attack involving Kaseya is a perfectly logical extension of everything we've seen since the end of last year with the disclosure of the SolarWinds attacks: the merger of supply chain exploits with ransomware to kickstart distribution, an even higher bar for extortions, and the same overall ecosystem at work. In other words, no surprises. |
Ransomware
|
|
|
 |
2021-07-06 15:45:16 |
Cybereason vs. REvil Ransomware: The Kaseya Chronicles (lien direct) |
As a spate of ransomware attacks continue to dominate the headlines in recent months, the infamous REvil ransomware gang has upped the ante significantly with a wide ranging operation that is suspected to have impacted thousands of small-to-midsize businesses through the compromise of a leading IT services provider. |
Ransomware
Guideline
|
|
|
 |
2021-07-06 14:17:09 |
Malicious Life Podcast: Jeff Moss on the History of DEF CON (lien direct) |
Jeff Moss, founder of the DEF CON Hacker conference (as well as Black Hat), discusses the origins of DEF CON, its "interesting relationship” with law enforcement and intelligence agencies, and some of the notable shenanigans the conference attendees pulled off over the years - check it out… |
|
|
|
 |
2021-07-01 09:28:08 |
CISO Stories Podcast: Why Relationships Matter if You Want to Elevate Security (lien direct) |
Communication in any organization can be a challenge, especially when working with different levels of government and various funding mechanisms. |
|
|
|
 |
2021-06-30 13:33:56 |
What SMBs Need to Know about Ransomware Attacks (lien direct) |
Ransomware attacks are on the rise. A recently released report by Cybereason, titled Ransomware: The True Cost to Business, detailed how malicious actors are fine-tuning their ransomware campaign tactics, and how both the frequency and severity of successful ransomware attacks have tremendous impact on victim organizations and their ability to conduct business. |
Ransomware
|
|
|
 |
2021-06-28 14:08:06 |
Malicious Life Podcast: The Life and Exploits of Albert Gonzales Part 1 (lien direct) |
It was as a teenager that Albert Gonzalez, one of the greatest cybercriminals in history, developed the obsession that would go on to ruin his life. Gonzalez and some of his friends would go on to pull off some of the most remarkable crimes in the history of computers - but they just didn't know when to stop. If they did, they might have gotten away with it, and they might not have ruined their lives. |
|
|
|
 |
2021-06-25 22:54:59 |
Ransomware Attacks: Will G7 and Biden-Putin Summits Prove Fruitful? (lien direct) |
I've been very busy lately. Between the back-to-back ransomware attacks and the release of our ransomware report highlighting the impact on business from ransomware attacks, I have been asked to share my thoughts and insights on a variety of broadcast and print media outlets. |
Ransomware
|
|
|
 |
2021-06-23 12:56:41 |
CISO Stories Podcast: Fixing the Talent Shortage - CyberSecurity Talent Initiative (lien direct) |
As threats to the nation's security grow, there remains a substantial shortage of skilled cybersecurity professionals. The federal government and private sector can work together to fill their open positions and attract the next generation of motivated mission-driven cybersecurity leaders. |
Guideline
|
|
|
 |
2021-06-22 13:07:04 |
Malicious Life Podcast: History of the THOTCON Hacking Conference (lien direct) |
THOTCON is not your ordinary, run-of-the-mill security conference, and it's obvious from the moment you browse their website. How did a local, small-scale event in Chicago grow to become a major cybersecurity conference? What is its connection to The Matrix movie? |
|
|
|
 |
2021-06-21 13:34:19 |
XDR: The Key to Higher Education\'s Fight Against Ransomware (lien direct) |
A single student recently became the conduit for a ransomware attack at a biomolecular institute. According to ZDNet, the attack occurred when a student at the unnamed European organization attempted to find a free version of a data visualization software solution. |
Ransomware
|
|
|
 |
2021-06-17 12:40:51 |
CISO Stories Podcast: So You Want to be a Cyber Spy? (lien direct) |
Ira Winkler, CISO at Skyline Technology Solutions, recounts his amazing journey from wannabe astronaut to NSA intelligence analyst, social engineer, systems hacker and author, and some of the crazy things that happened along the way - check it out... |
|
|
|
 |
2021-06-17 12:32:14 |
Biden-Putin Summit and Why Threat Actors Just Won\'t Give it a Rest (lien direct) |
On June 11, McDonald's said in a message to its U.S. employees that it had discovered unauthorized activity on an internal security system. The burger chain responded by bringing on some external consultants to investigate what had happened, reported the Wall Street Journal. |
Threat
|
|
|
 |
2021-06-16 04:04:05 |
Report: Ransomware Attacks and the True Cost to Business (lien direct) |
Ransomware attacks have continued to make headlines, and for good reason: on average, there is a new ransomware attack every 11 seconds, and the losses to organizations from ransomware attacks is projected to reach $20 billion over the course of 2021 following a record increase in losses of more than 225% in 2020. So what is the true cost to businesses who have been impacted by a ransomware attack? |
Ransomware
|
|
|
 |
2021-06-15 15:00:00 |
Russia\'s Offer to Extradite Attackers - and a Grain of Salt (lien direct) |
President Vladimir Putin said that Russia would be willing to hand over cyber criminals to the United States if Washington agreed to reciprocate. According to Reuters, Putin disclosed his country's willingness to work with the United States on prosecuting cyber criminals in an interview aired by state television over the weekend. |
|
|
|
 |
2021-06-15 13:46:35 |
Deja Vu: What Do NotPetya and SolarWinds Have in Common? (lien direct) |
As I was waking up in Boston on the morning of June 27, 2017, reports were being shared on social media that an electric power supplier in Ukraine was hit by a cyber attack. Within about an hour, a Danish power supplier was also knocked offline and Maersk shipping announced that it was affected as well. By the time I arrived at my desk, companies around the world were shut down by the same attack--which Symantec declared as Petya ransomware. It was going to be a busy and interesting day. |
|
NotPetya
NotPetya
|
|
 |
2021-06-15 12:56:41 |
Malicious Life Podcast: China\'s Unrestricted Cyberwarfare Part 3 (lien direct) |
For more than a decade, China orchestrated a sophisticated espionage campaign against Nortel Networks, using Huawei, Chinese civilians working in Canada, and even organized crime gangs to steal important technical and operational information. When Nortel finally fell, the Chinese were there to reap the rewards of their death. |
|
|
|
 |
2021-06-14 11:59:48 |
Ransomware Attacks are Evolving: What You Need to Know (lien direct) |
One look at all the ransomware attacks from the past few years, and it's clear that crypto-malware actors are attempting to maximize their financial gain. We've observed these threat groups using multiple techniques to profit even more off their victims than in years past. Here are a few tactics that stood out to us.
|
Ransomware
Threat
|
|
|
 |
2021-06-09 13:23:33 |
CISO Stories Podcast: No Insider Cybersecurity Risk? Guess Again! (lien direct) |
We want to trust our employees and contractors working within our organizations. For the most part, people are doing their jobs with integrity every day. What happens when an employee decides to leave the organization and start their own business – but with your Intellectual property or customer lists? |
|
|
|
 |
2021-06-08 20:14:43 |
DOJ Recovers $2.3M in Bitcoin Ransom Paid by Colonial Pipeline (lien direct) |
Investigators recovered $2.3 million in bitcoin paid by the Colonial Pipeline Company to DarkSide following a ransomware attack in early May. On June 7, the Department of Justice (DOJ) revealed that law enforcement agencies had been tracking transfers of bitcoin when they spotted the movement of 63.7 bitcoins associated with the Colonial Pipeline Company's ransom payment. |
|
|
|
 |
2021-06-08 18:47:33 |
Webinar: Live Ransomware Attack Simulation (lien direct) |
If you're concerned about ransomware, whether it's beating REvil or DarkSide, stopping data exfiltration, or preventing the latest trend of double extortion, this session is for you!
Join us for a live ransomware attack simulation, where we'll discuss the latest attack trends, walk through a multi-stage ransomware attack. |
Ransomware
|
|
|
 |
2021-06-08 13:25:12 |
Malicious Life Podcast: Inside the DarkSide Colonial Pipeline Attack (lien direct) |
On Friday, May 7th, 2021, Colonial Pipeline suffered a cyberattack that forced the company to shut down its operations. As a result, gasoline outages were reported across the U.S. East Coast. |
|
|
|
 |
2021-06-07 12:14:36 |
Market Drivers for XDR and MSSP Service Opportunities (lien direct) |
In my last article, we looked at how to define Extended Detection and Response (XDR) solutions from an MSSP perspective and where it fits in as part of an overall Managed Detection and Response (MDR) service offering. |
|
|
|
 |
2021-06-03 12:56:16 |
CISO Stories Podcast: CISOs Cross the Bridge to the Cloud (lien direct) |
Today, most organizations have moved some or all of their workloads to the cloud.This migration provides opportunities of scale, flexibility and speed, but the data moves further away from the physical control of the organization. |
|
|
|
 |
2021-06-02 18:46:55 |
Cybereason vs. REvil Ransomware (lien direct) |
According to reports, meatpacking giant JBS was hit with a serious attack reportedly involving REvil ransomware, shutting down a good portion of the company's production capabilities and threatening to create supply chain disruptions and sharp cost of goods increases. |
Ransomware
|
|
|
 |
2021-06-02 12:01:43 |
Cybereason Joins with MITRE Engenuity\'s Center for Threat-Informed Defense (lien direct) |
Cybereason is excited to announce that it is now a research sponsor of the Center for Threat-Informed Defense, allowing collaboration on applied research and development to improve cyber defenses at scale for the global security community. |
|
|
|
 |
2021-06-01 16:53:30 |
SolarWinds Threat Actors Behind New Email Attack Campaign (lien direct) |
The threat actors behind last year's SolarWinds supply chain attack have launched a new email attack campaign aimed at organizations around the world. This attack wave attracted the attention of the Microsoft Threat Intelligence Center (MSTIC) on May 25. |
Threat
|
|
|
 |
2021-06-01 12:51:20 |
The Line in the Sand: How We Respond Today Impacts Our Security Tomorrow (lien direct) |
In the past few months, we've faced massive attacks with SolarWinds and the HAFNIUM attacks targeting Microsoft Exchange, followed by the unprecedented ransomware attack by DarkSide that crippled US critical infrastructure. It is time to ask ourselves again, what is really going on? More importantly, the time has come for the United States government to do some soul searching on why defenses have failed and how we can prevent similar attacks in the future. |
Ransomware
|
|
|
 |
2021-06-01 12:13:07 |
Malicious Life Podcast: China\'s Unrestricted Cyberwarfare Part 2 (lien direct) |
In China's Unrestricted Cyberwarfare Part 1 we explored the story of two Chinese military officers, veterans of the semi-conflict with Taiwan, who helped shape the role of cyber in modern warfare in China and beyond with special guest Lieutenant Colonel, USMC (retired) Bill Hagestad, a leading international authority on cyberwarfare and Chinese cyber operations and capabilities specifically. |
Guideline
|
|
|
 |
2021-05-27 12:51:11 |
XDR: Moving Beyond the Limits of SIEM and SOAR (lien direct) |
Organizations around the world are under siege from cyberattacks, and they need tools that can protect against malware, exploits, and increasingly sophisticated attacks on both devices and users. SIEM, SOAR and EDR technologies all have their benefits, but organizations with mature security programs are looking to move beyond the limits of these offerings - that's where the advent of XDR comes into play. |
|
|
|
 |
2021-05-26 12:52:12 |
Ransomware Trends: Six Notable Ransomware Attacks from 2021 (lien direct) |
The security community witnessed triple-digit growth in the number of publicly disclosed ransomware incidents in 2020. As noted in a previous blog post on Five Things You Need to Know About Ransomware Attacks, ransomware attacks grew 715% in H1 2020 compared to the first half of the previous year. Ransomware incidents for 2020 overall increased by more than 150%. |
Ransomware
|
|
|
 |
2021-05-25 13:19:15 |
Cybereason Makes Big Debut on CNBC 2021 Disruptor 50 List (lien direct) |
The Cybereason team is thrilled to have been named to the CNBC 2021 Disruptor 50 list of the most disruptive privately-held global companies. Cybereason debuted in the #32 spot and is one of only two cybersecurity companies on the list. Cybereason was chosen from a record number of nearly 1,600 nominations. |
|
|
|
 |
2021-05-25 12:29:32 |
CISO Stories Podcast: Five Critical Elements for Protecting the Right Assets (lien direct) |
We have limited investment dollars and therefore must ensure we are protecting the right assets. The practical side of determining “what” needs to be protected and “how” is a convoluted maze of academics, taxonomies, frameworks, and inconsistent approaches. |
|
|
|
 |
2021-05-25 12:23:45 |
New Cybersecurity Executive Order: Will It Have Impact? (lien direct) |
The state of the threat landscape in general, and incidents like the recent ransomware attack against Colonial Pipeline demand that we take immediate action to improve cybersecurity defenses. The recent executive order (EO) on cybersecurity from President Biden is a bold step in the right direction. |
Threat
|
|
|
 |
2021-05-24 20:59:01 |
Record Setting $40M Ransom Paid to Attackers (lien direct) |
CNA, one of the largest U.S. commercial and casualty insurance companies, reportedly met a $40 million ransom demand after suffering a ransomware infection earlier in the year. As of this writing, that's the largest ransom demand ever reported to have been paid by a company following a ransomware attack. |
Ransomware
|
|
|