CISA - Security Ticks

US Gov Expects Widespread Exploitation of Atlassian Confluence Vulnerability

Atlassian, CISA, exploited, Vulnerabilities / SecurityTicks

US Gov Expects Widespread Exploitation of Atlassian Confluence Vulnerability 17/10/2023 at 14:16 By Ionut Arghire CISA, FBI, and MS-ISAC warn of potential widespread exploitation of CVE-2023-22515, a critical vulnerability in Atlassian Confluence. The post US Gov Expects Widespread Exploitation of Atlassian Confluence Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]

React to this headline:

US Gov Expects Widespread Exploitation of Atlassian Confluence Vulnerability Read More »

CISA Now Flagging Vulnerabilities, Misconfigurations Exploited by Ransomware

CISA, Government, Ransomware, Vulnerabilities / SecurityTicks

CISA Now Flagging Vulnerabilities, Misconfigurations Exploited by Ransomware 13/10/2023 at 17:16 By Ionut Arghire CISA is now flagging vulnerabilities and misconfigurations that are known to be exploited in ransomware attacks. The post CISA Now Flagging Vulnerabilities, Misconfigurations Exploited by Ransomware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

CISA Now Flagging Vulnerabilities, Misconfigurations Exploited by Ransomware Read More »

CISA Reverses Course on Malicious Exploitation of Video Conferencing Device Flaws

Bluetooth, CISA, CISA KEV, Featured, Vulnerabilities / SecurityTicks

CISA Reverses Course on Malicious Exploitation of Video Conferencing Device Flaws 06/10/2023 at 13:46 By Eduard Kovacs CISA has removed from its KEV catalog five Owl Labs video conferencing flaws that require the attacker to be in Bluetooth range. The post CISA Reverses Course on Malicious Exploitation of Video Conferencing Device Flaws appeared first on

React to this headline:

CISA Reverses Course on Malicious Exploitation of Video Conferencing Device Flaws Read More »

9 essential ransomware guides and checklists available for free

ANSSI, CISA, cybercrime, Don't miss, DXC Technology, Egnyte, FTC, Government, guide, Hot stuff, how-to, IBM, IBM X-Force, Malware, National Cyber Security Centre, News, Ransomware, strategy, tips / SecurityTicks

9 essential ransomware guides and checklists available for free 02/10/2023 at 08:03 By Help Net Security According to Fortinet, ransomware activity has intensified, registering an increase of 13 times compared to the beginning of 2023 in terms of all malware detections. The rise of Ransomware-as-a-Service has primarily driven this surge in ransomware variations. According to

React to this headline:

9 essential ransomware guides and checklists available for free Read More »

Securing GitHub Actions for a safer DevOps pipeline

CISA, Cloud, cloud security, credentials, cybersecurity, DevOps, Don't miss, Features, GitHub, Hot stuff, Kubernetes, monitoring, News, NSA, open source, opinion, StepSecurity / SecurityTicks

Securing GitHub Actions for a safer DevOps pipeline 02/10/2023 at 07:32 By Mirko Zorz GitHub Actions provides a platform for continuous integration and continuous delivery (CI/CD), enabling your build, test, and deployment process automation. It allows you to establish workflows that build and test each pull request in your repository and deploy approved pull requests

React to this headline:

Securing GitHub Actions for a safer DevOps pipeline Read More »

Government Shutdown Could Bench 80% of CISA Staff

CISA, Government / SecurityTicks

Government Shutdown Could Bench 80% of CISA Staff 28/09/2023 at 17:01 By Eduard Kovacs Roughly 80% of CISA staff will be sent home at the end of the week in case of a government shutdown. The post Government Shutdown Could Bench 80% of CISA Staff appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Government Shutdown Could Bench 80% of CISA Staff Read More »

CISA Unveils New HBOM Framework to Track Hardware Components

CISA, Government, Hardware supply chain, SBOM, Security Infrastructure, Supply Chain Security / SecurityTicks

CISA Unveils New HBOM Framework to Track Hardware Components 27/09/2023 at 18:16 By Ryan Naraine CISA unveils a new Hardware Bill of Materials (HBOM) framework for buyers and sellers to communicate about components in physical products. The post CISA Unveils New HBOM Framework to Track Hardware Components appeared first on SecurityWeek. This article is an

React to this headline:

CISA Unveils New HBOM Framework to Track Hardware Components Read More »

Faster Patching Pace Validates CISA’s KEV Catalog Initiative

CISA, CISA KEV, Government, Risk Management, Vulnerabilities / SecurityTicks

Faster Patching Pace Validates CISA’s KEV Catalog Initiative 22/09/2023 at 15:17 By Ionut Arghire CISA says Known Exploited Vulnerabilities Catalog has helped federal agencies significantly accelerate their vulnerability remediation pace. The post Faster Patching Pace Validates CISA’s KEV Catalog Initiative appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Faster Patching Pace Validates CISA’s KEV Catalog Initiative Read More »

CISA Releases New Identity and Access Management Guidance

CISA, Government, IAM, identity, Identity & Access, Security Architecture / SecurityTicks

CISA Releases New Identity and Access Management Guidance 18/09/2023 at 15:03 By Ionut Arghire CISA has released new guidance on how federal agencies can integrate identity and access management into their ICAM architecture. The post CISA Releases New Identity and Access Management Guidance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

CISA Releases New Identity and Access Management Guidance Read More »

US Agencies Publish Cybersecurity Report on Deepfake Threats

CISA, deepfake, Fraud & Identity Theft, guidance, Management & Strategy / SecurityTicks

US Agencies Publish Cybersecurity Report on Deepfake Threats 13/09/2023 at 18:49 By Eduard Kovacs CISA, FBI and NSA have published a cybersecurity report on deepfakes and recommendations for identifying and responding to such threats. The post US Agencies Publish Cybersecurity Report on Deepfake Threats appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

US Agencies Publish Cybersecurity Report on Deepfake Threats Read More »

US Aeronautical Organization Hacked via Zoho, Fortinet Vulnerabilities

CISA, Cyberwarfare, Malware & Threats / SecurityTicks

US Aeronautical Organization Hacked via Zoho, Fortinet Vulnerabilities 08/09/2023 at 13:33 By Ionut Arghire APTs exploited vulnerabilities in Zoho ManageEngine and Fortinet VPNs to hack an aerospace organization in early January 2023. The post US Aeronautical Organization Hacked via Zoho, Fortinet Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

US Aeronautical Organization Hacked via Zoho, Fortinet Vulnerabilities Read More »

CISA Releases Guidance on Adopting DDoS Mitigations

CISA, DDoS, Government, guidance / SecurityTicks

CISA Releases Guidance on Adopting DDoS Mitigations 07/09/2023 at 17:48 By Ionut Arghire CISA has released new guidance to help federal agencies decide upon and prioritize DDoS mitigations based on mission and reputational impact. The post CISA Releases Guidance on Adopting DDoS Mitigations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

CISA Releases Guidance on Adopting DDoS Mitigations Read More »

MITRE Caldera for OT now available as extension to open-source platform

CISA, critical infrastructure, DHS, GitHub, HSSEDI, MITRE, News, open source, USA / SecurityTicks

MITRE Caldera for OT now available as extension to open-source platform 06/09/2023 at 09:32 By Help Net Security MITRE Caldera for OT is now publicly available as an extension to the open-source Caldera platform, allowing security teams to run automated adversary emulation exercises that are specifically focused on threats to operational technology (OT). The first

React to this headline:

MITRE Caldera for OT now available as extension to open-source platform Read More »

CISA Hires ‘Mudge’ to Work on Security-by-Design Principles

CISA, CISO Strategy, Government, Mudge, National Cybersecurity Strategy, Security Architecture, Twitter / SecurityTicks

CISA Hires ‘Mudge’ to Work on Security-by-Design Principles 05/09/2023 at 21:47 By Ryan Naraine Peiter ‘Mudge’ Zatko joins the US government’s cybersecurity agency to preach the gospel of security-by-design and secure-by-default development principles. The post CISA Hires ‘Mudge’ to Work on Security-by-Design Principles appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

CISA Hires ‘Mudge’ to Work on Security-by-Design Principles Read More »

MITRE and CISA Release Open Source Tool for OT Attack Emulation

CISA, ICS, ICS/OT, MITRE, OT / SecurityTicks

MITRE and CISA Release Open Source Tool for OT Attack Emulation 05/09/2023 at 18:18 By Ionut Arghire MITRE and CISA introduce Caldera for OT, a new extension to help security teams emulate attacks targeting operational technology systems. The post MITRE and CISA Release Open Source Tool for OT Attack Emulation appeared first on SecurityWeek. This

React to this headline:

MITRE and CISA Release Open Source Tool for OT Attack Emulation Read More »

Exploit Code Published for Critical-Severity VMware Security Defect

Aria Operations for Networks, CISA, CVE-2023-34039, ICS/OT, Network Security, VMWare, Vulnerabilities / SecurityTicks

Exploit Code Published for Critical-Severity VMware Security Defect 02/09/2023 at 02:22 By Ryan Naraine Exploit code and root-cause analysis released by SinSinology documents the problem as a case where VMWare “forgot to regenerate” SSH keys. The post Exploit Code Published for Critical-Severity VMware Security Defect appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Exploit Code Published for Critical-Severity VMware Security Defect Read More »

CISA Releases Cyber Defense Plan to Reduce RMM Software Risks

CISA, Government, Identity & Access, Management & Strategy / SecurityTicks

CISA Releases Cyber Defense Plan to Reduce RMM Software Risks 17/08/2023 at 14:32 By Ionut Arghire CISA has published a cyber defense plan outlining strategies to help critical infrastructure organizations reduce the risks associated with RMM software. The post CISA Releases Cyber Defense Plan to Reduce RMM Software Risks appeared first on SecurityWeek. This article

React to this headline:

CISA Releases Cyber Defense Plan to Reduce RMM Software Risks Read More »

Black Hat USA 2023 video walkthrough

1Password, Aqua Security, Black Hat, Black Hat USA 2023, CISA, Cisco, conferences, CyberFOX, Darktrace, Dasera, Don't miss, Fortanix, Fortinet, Fortra, Hot stuff, HUMAN Security, Illumio, ManageEngine, Mimecast, NetSPI, Palo Alto Networks, Proofpoint, SentinelOne, Sophos, Tenable, Trellix, Uptycs, Video, VMWare, Wiz, Zimperium / SecurityTicks

Black Hat USA 2023 video walkthrough 11/08/2023 at 15:04 By Help Net Security Help Net Security is in Las Vegas this week for Black Hat USA 2023, and this video provides a closer look at the event. The exhibitors featured in this video are: 1Password, Aqua Security, CISA, Cisco, CyberFOX, Darktrace, Dasera, Fortanix, Fortinet, Fortra,

React to this headline:

Black Hat USA 2023 video walkthrough Read More »

CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio

.NET, CISA, Featured, Microsoft, Vulnerabilities, Zero-Day / SecurityTicks

CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio 10/08/2023 at 12:33 By Eduard Kovacs CISA has added CVE-2023-38180, a zero-day vulnerability affecting .NET and Visual Studio, to its Known Exploited Vulnerabilities Catalog. The post CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio appeared first on SecurityWeek. This article is an excerpt

React to this headline:

CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio Read More »

Learning from past healthcare breaches to fortify future cybersecurity strategies

Centura Health, CISA, cybercrime, cybersecurity, data, data breach, Don't miss, Features, Health3PT, healthcare, HITRUST, Hot stuff, legacy technology, News, opinion / SecurityTicks

Learning from past healthcare breaches to fortify future cybersecurity strategies 10/08/2023 at 07:02 By Help Net Security In the face of rising cyber threats, the healthcare sector has become a hotbed for cyberattacks. Given the gravity of this situation, we sat down with Shenny Sheth, Deputy CISO at Centura Health, who sheds light on the

React to this headline:

Learning from past healthcare breaches to fortify future cybersecurity strategies Read More »