This is where we share our expertise, thoughts and advice.
On October 15, 2024, the Department of Defense (DoD) officially published the long-anticipated Final Rule for 32 CFR, solidifying the framework for the Cybersecurity Maturity Model Certification (CMMC) Program.
Faced with increasing risks associated with IT systems, the protection of personal data and information systems has become a strategic priority. In this article, we will address the major cybersecurity challenges for businesses and propose concrete strategies to overcome them.
Machine learning and AI have transformative potential, but they also bring new risks and challenges. Organizations must carefully manage issues related to data retention and ownership, transparency and privacy, access control, and other unintended consequences. By addressing these concerns and implementing protective measures, businesses can harness the power of these technologies while keeping their sensitive information secure. But it’s crucial for security teams to be proactive and informed as the machine learning and AI landscape continues to evolve.
Aqua Nautilus researchers identified a new Linux malware targeting Weblogic servers. The main payload calls itself Hadooken, a potential reference to the Hadouken attack (or “surge fist”) in the Street Fighter video game series. When Hadooken is executed, it drops a Tsunami malware and deploys a cryptominer. In this article, we explain the malware, its components, and how it was detected.
The evolution of the Industrial Revolution, from mechanization in the 18th century to today’s Industry 4.0, has brought about significant advancements in technology and productivity. Industry 4.0 is characterized by connected factories and cyber-physical systems leveraging the industrial Internet of things (IIoT), artificial intelligence (AI), and big data to optimize processes in real time and enable innovations like predictive maintenance and remote management. However, this increased connectivity and complexity also heightens the risk of cyberattacks, which can jeopardize data integrity, system availability, and safety, potentially causing severe disruptions to industrial operations and compromising personal safety.
In 2023, 6.06 billion malware attacks were detected globally. The most commonly blocked types of malware were worms, viruses, ransomware, and trojans. Phishing attacks, primarily delivered through e-mail and websites, continue to incur significant costs for both individuals and enterprises.
Learn everything you need to know about malware in this article.
Every company, no matter its size, has digital assets, tools, and resources that need protection.
Developing a cybersecurity plan, implementing protective measures, and documenting procedures are essential steps for safeguarding assets. However, only the penetration test provides a concrete assessment of vulnerabilities and immediate insights into cyber risks and threats.
Learn why you should run pen tests no matter your organization size :
The recent amendment to 48 CFR, dated August 14th, 2024, offers clarity on the timeline and implementation of Cybersecurity Maturity Model Certification (CMMC) requirements within defence contracts.
The rollout will proceed over a three-year phased approach.
This rule, expected to be in force June 2025 will insert CMMC requirements into DoD contracts.
AI tools have revolutionized the way organizations work, significantly enhancing efficiency and productivity. Companies increasingly implement tools like Microsoft Copilot into their daily operations, assisting employees by organizing tasks, processing large quantities of data, and helping streamline operations. While AI tools are widely adopted by enterprises, they are also catching the attention of cybercriminals. A new cyber threat has emerged: Remote “Copilot” Execution (RCE) attacks, as demonstrated at Black Hat USA 2024.
Regularly securing your data is your most reliable ally. With regular backups, your data will remain secure, intact, and ready to be restored in the event of a successful attack. This is your continuity plan against ransomware attacks that seek to compromise your organization’s access to its critical data.
