Author: Admin

Microsoft addressed over 1000 CVEs as part of Patch Tuesday releases in 2024, including 22 zero-day vulnerabilities. Background Microsoft’s Patch Tuesday, a monthly release of software patches for Microsoft products, has just celebrated its 21st anniversary. After a wrap-up covering the 20th anniversary in 2023, the Tenable Security Response Team (SRT) chose to keep the tradition and cover trends and significant vulnerabilities from the 2024 Patch Tuesday releases. Analysis In 2024, Microsoft patched 1,009 CVEs…

What is 3AM? 3AM (also known as ThreeAM) is a ransomware group that first emerged in late 2023. Like other ransomware threats, 3AM exfiltrates victims’ data (threatening to release it publicly unless a ransom is paid) and encrypts the copies left on targeted organisations’ computer systems. So it’s the normal story with ransomware – exfiltrate, encrypt, extort? Pretty much – but there are some notable aspects of 3AM that are worthy of mentioning. Such as…

A significant cyber operation exploiting vulnerabilities in improperly configured public websites has been linked to the Nemesis and ShinyHunters hacking groups, exposing sensitive data, including customer information, infrastructure credentials and proprietary source code. According to independent cybersecurity researchers Noam Rotem and Ran Locar, the attackers orchestrated a large-scale internet scan targeting vulnerable endpoints within Amazon Web Services (AWS) IP ranges. They accessed sensitive information through misconfigured systems, resulting in over 2 TB of compromised data. This data…

When you have a young daughter like I do, it’s almost impossible to avoid getting swept up into the Taylor Swift fan frenzy. After attending one of her concerts recently with my family, I came away impressed by her talent and even more so with her entrepreneurial mindset, brand management, and resilience. In my nearly three decades of financial management and capital markets experience, I’ve learned many lessons and fundamental truths. And as I thought…

Ransomware groups are focusing more than ever on utilities, with the sector facing a 42% surge in attacks over the past year, according to ReliaQuest. In its latest report, Uncovering Critical Cyber Threats to Utilities, published on December 10, the US cybersecurity firm shared findings of cyber threats to the utilities sector between November 1, 2023, and October 31, 2024. The report shows that the rise in ransomware is due to cybercriminals setting their eyes…