Senate report says agencies including Homeland Security and State have substandard security measures

Yahoo!

Government agencies are putting citizen data at risk through poor cybersecurity practices, such as running legacy systems and applications no longer supported by the vendor with security updates, according to a new Senate report.

Zoom Settlement: An $85M Business Case for Security Investment

Threat Post

Zoom’s security lesson over end-to-end encryption shows the costs of playing cybersecurity catchup.

Accenture Issued Ransomware Warning After LockBit Attack

CRN

Several days after reportedly discovering the LockBit ransomware breach of its systems.

Leaked Documents Reveal Iran’s Contingency Plans for Sinking Cargo Ships, Attacking Fuel Infrastructure With Cyber Attacks

CPO Magazine

A set of documents obtained by Sky News, allegedly obtained from the Iranian cyber command, details plans by Iran to do advanced real-world damage with cyber attacks.

Kaseya hack exacerbates worrisome supply-chain, ransomware exposures

Security Boulevard

It was bound to happen: a supply-chain compromise, ala SolarWinds, has been combined with a ransomware assault, akin to Colonial Pipeline, with devastating implications.

Another ransomware attack could escalate US-Russia tensions

The Washington Examiner

A ransomware attack on software vendor Kaseya may have compromised hundreds of companies and raises new questions about relations between the United States and Russia.

More fall-out from the Kaseya ransomware attack

IT World Canada

The success of a ransomware attack on the Kaseya VSA remote monitoring suite has a number of experts worried.

Another day, another major ransomware attack

SecurityInfoWatch

Cybersecurity pros weigh in on the recent Kaseya incident and its impact on the industry

Developments in the Kaseya ransomware attack: recovery and response.

The CyberWire

As Kaseya continues to move closer toward normal operations and capacity, the US considers defensive and retaliatory options.

REvil Ransomware Attack on Kaseya Compromises up to 1500 Businesses

ClearanceJobs

Software vendor Kaseya didn’t exactly have a good holiday weekend.

Ransomware group REvil conducts 15 cyberattacks per week over 2 months, research shows

Yahoo! News

REvil, a ransomeware group linked to Russian hackers, has conducted 15 cyberattacks per week over two months, according to new research.

Ransomware group REvil conducts 15 cyberattacks per week over 2 months, research shows

Fox Business

REvil, a ransomeware group linked to Russian hackers, has conducted 15 cyberattacks per week over two months, according to new research.

4 Startups Driving Cybersecurity Innovation

Security Boulevard

Constant innovation is a constant within cybersecurity. Information technology evolves and bad actors adjust with new attack vectors. Cybersecurity must innovate to keep pace with both IT and attackers by improving cybersecurity tools.

Expert Insight On ALPACA Attack

Information Security Buzz

Researchers have discovered a new type of attack, dubbed ALPACA, that exploits misconfigurations in transport layer security (TLS) servers to redirect HTTPS traffic from a victim’s web browser to a different TLS service endpoint located on another IP address to steal sensitive information.

McDonald's Corp suffers data breach

Security Magazine

McDonald's Corp. said hackers exposed U.S. business information and some customer data in South Korea and Taiwan.

Biden infrastructure plan contains $20 billion for energy cybersecurity

The Washington Examiner

President Joe Biden's $2.3 trillion infrastructure proposal includes funding to encourage cybersecurity improvements to the nation's energy infrastructure, including electrical grids.

Strong Encryption and Better Tools are the Way to Ensure Protection of Data and Systems From External Threats

Brilliance Security Magazine

The notion that strong encryption, combined with better tools, is the only real way to ensure...