Beitrag von Telekom Security

Data breaches are inflicting severe damage on enterprises, as revealed in a recent study by Pentera. Key findings from the survey of 450 security leaders include: 🔐 93% of breached enterprises report severe consequences, including operational downtime and financial losses 🔐 Enterprises spend 13% of their cybersecurity budgets on pentesting to evaluate system robustness and inform budget decisions 🔐 Despite regular quarterly IT updates, only 40% of enterprises conduct pentesting with the same frequency, increasing vulnerability to cyberattacks Get the full breakdown from Tech radar Pro: https://okt.to/TLSW25 #CyberSecurity #StateOfPentesting2024

Being proactive is key to staying ahead of cyber threats. Check out our blog for a step-by-step action plan to bolster your defenses and respond effectively in case of a breach 👇 https://hubs.li/Q02mvvkg0

October marks #CybersecurityAwarenessMonth, and we're proud to join the global initiative to raise awareness about the importance of protecting critical assets and networks. 🛡️ At OPSWAT, we’re committed to protecting the world’s most critical environments with our IT/OT cybersecurity solutions. Here are four key attack vectors we’re focusing on this year: 🔌 USB/Peripheral Media External devices like USBs are convenient, but they're also common targets for cyberattacks. Our MetaDefender Kiosk helps sanitize these devices, enhancing security and preventing attacks from peripheral media. ✉️ Email Security Tips Emails remain the most common channel for malware, often hidden in attachments. Our latest research report shows 80% of organizations faced email-related security breaches last year. We’re committed to equipping critical infrastructure with prevention-based solutions to stay protected. 🔄 Install Updates and Patches Regular updates and patches are key to reducing vulnerability. Our MetaDefender Endpoint Management solution makes it easy for admins to detect new devices and stay on top of necessary updates. 🧠 The Human Element Staying informed is crucial as cyber threats continue to evolve. OPSWAT Academy provides the tools and knowledge to keep your workforce prepared against emerging attacks. Get in touch today with our team today - stay secure and protected https://lnkd.in/dvQJnhVU Osnat Taub-Tagansky (אוסנת טאוב-טגנסקי) Sigal Elias 🎗️ Dor Bismuth Jemma Azoulay Ariel Watson ✔ Shay Czarny Noam Gavish Yael Sladky Itay Bochner Aviram Hay 🎗️Ori Czarny Maria Altshuler Shani Ezer Simita Benmocha Eric Spindel Itay Glick #CybersecurityAwarenessMonth #CyberProtection #OPSWAT

🚨 Exciting Announcement 🚨 I'm thrilled to share my latest blog post, "Black Basta - Insights from a Ransomware Response Assessment", which discloses parts of Black Basta's Command and Control infrastructure enabling Cyber Defense Center around the world to mitigate and detect ongoing Black Basta attacks. We gathered these insights during an incident that our HvS Incident Response team recently handled. Key Highlights: 🔍 Insights about a recent Black Basta Incident 🔒 High-quality IOCs published Read the full article here: https://lnkd.in/eFpfHm8C This article once again shows, that established ransomware groups often lack sophistication and can be protected against with the right measures. Let's stay ahead of cyber threats together! Don't hesitate to reach out with any questions or to discuss further collaboration opportunities. #CyberSecurity #IncidentResponse #RansomwareProtection #Ransomware #BlackBasta

In a world reliant on complex IT systems, disruptions can pose severe threats. Based on a global survey of IT leaders, the #Kyndryl State of IT Risk Report reveals that disruptions are a reality and provides the nine foundational steps to anticipate, protect against, withstand and recover from these disruptions.  Assess your IT risk strategy and explore the nine foundational steps to achieve cyber resilience. Learn more: https://lnkd.in/eM3tHDff #CyberSafetyFirst #CyberResilience

🌟 Our 2023 Report offers critical policy recommendations and insights into staying ahead of cyber threats, making it a valuable resource for security teams aiming for resilience. Explore our findings at https://lnkd.in/gVmagRJA. #NodeZero #pentesting #infosec

Last year's evolving cyber threat landscape set the stage for a paradigm shift in #cybersecurity approaches. With plenty of successful breaches and #ransomware attacks, it's clear that traditional, purely defensive security strategies aren't working. Horizon3.ai Principal Security SME Stephen Gates shares how this realization is prompting orgs worldwide to rethink their security measures in Cyber Defense Magazine: https://lnkd.in/eFv2595y. #NodeZero #infosec

🕵️ MITRE Disclosed State-Sponsored Breach via Ivanti Zero-Days 🕵️ ◾ In January 2024, MITRE Corporation reported a breach by a state-backed hacking group that exploited two zero-day vulnerabilities in Ivanti VPN. ◾ The breach affected MITRE's collaborative network - Experimentation, Research, and Virtualization Environment (NERVE), used for research. Although MITRE confirmed the breach, they assured that their core enterprise network and partners' systems remained unaffected. ◾ MITRE notified affected parties, engaged relevant authorities, and restored “operational alternatives”. CEO Jason Providakes emphasized that no organization is immune despite robust cybersecurity efforts. ◾ The attackers used sophisticated techniques and bypassed MFA, including session hijacking and deploying malware for espionage by compromising VMware infrastructure. The vulnerabilities (CVE-2023-46805 and CVE-2024-21887) were exploited for espionage, linked to an APT UNC5221, with signs of Chinese state-sponsored involvement. ◾ Over 2,100 Ivanti appliances were backdoored, impacting organizations worldwide, prompting CISA to issue an emergency directive on January 19 to mitigate the zero-day vulnerabilities. #Mitre #Ivanti #networksecurity #databreach #malware #VPN #zeroday #vulnerability #cyberattack #cybersecurity #dynexogmbh

👉 A special post for all security experts that gather information from incident response cases. Northwave developed a Decision Tree to navigate the considerations and dilemmas you encounter when dealing with the question of whether or not information obtained during an incident can/should be shared with an external party. The Decision Tree was presented today by Romy W. for the first time at the Open Cyber Security Conference (OCSC '24) in Tenerife.   In her presentation, she explains that the decision whether or not to share information, should be handled with care. This is important because the cybersecurity community possesses valuable pieces of information, and when combined, these pieces become even more powerful. The Decision Tree shows the steps we consider within Northwave, to ensure that we share the right information, at the right moment, with the right recipient. We invite you, as a security expert, to share your views with us about the Decision Tree. For example, let us know which aspects your organisation takes into consideration that we might have missed. Or what aspects are in our Decision Tree that surprised you. Download the Decision Tree here: https://lnkd.in/eGTw3EJR Special thanks to Patrick van Looy, Jet Boverhuis, Christiaan Ottow, Pim Takkenberg, Erwin Maas, Jair Santanna and Romy W. for their efforts in creating this Decision Tree. #OCSC24