Quest Software’s Post

Group Policy is a powerful technology for defenders and adversaries alike.   It enables centralized management of users and computers in any Microsoft Active Directory environment, serving as the gateway to full control over an entire AD domain.   So, just how pervasive is the threat of Group Policy abuse?   Our own David Barnett details how Group Policy is being targeted and what to consider when creating an in-depth defense against cyber criminals abusing the power of Group Policy for their own malicious intent 👉 https://lnkd.in/dCZhSAHS   #ActiveDirectory #GroupPolicy #CyberSecurity

Small businesses beware! The ransomware scene has a new tool, specifically designed to target SMBs. Big companies offer bigger rewards but they are much harder to breach. Small businesses usually do little to nothing to protect themselves against cyber attacks, we have seen it in our go-to-market motion, whenever we speak with SMB prospects in most cases they just have no specific tool for cyber security and they just trust Microsoft / Google to provide all the security they need. Clearly, that approach is insufficient and will become increasingly problematic as ransomware groups' attention shifts towards smaller and very easy-to-breach targets. If you are an SMB and you don't have any email security in place, try Planck for free!

It is a bad day when cybercriminals takeover your PC and leverage your hard drive encryption security tool to hold hostage your system. Yes, #cybersecurity tools are great targets for hackers, as they typically have tremendous permissions to make significant changes to the system they are supposed to protect. This is why cybersecurity vendors must be at the pinnacle of security practices so their products don’t become a tool for the attackers! As a CISO, never assume your product vendors are following the best security practices. Ask and verify.

Cyber threats are evolving rapidly, and it's essential for us to keep up. Jason (Jay) Mar-Tang, CISSP, CCSP from Pentera shares insights on how cybercriminals are employing sophisticated techniques such as AI-driven attacks and identity theft to infiltrate systems. Their tactics are expanding, ranging from phishing to deepfakes. Learn how these evolving strategies might affect your business and what steps can take to safeguard it: https://okt.to/7tefJz InformationWeek #close #CyberSecurity

The misuse of Microsoft BitLocker by ransomware attackers underscores the complex threat landscape cloud environments face today. Having built-in encryption tools used against organisations by cybercriminals is a harsh irony that highlights how weaponized common features can be. Here are three shields businesses can employ to protect themselves: 1. Backup Regularly: Regular backups ensure that data can be retrieved even after a ransomware attack. Ensure backups are not connected to your company's main network to prevent them from being encrypted during an attack. 2. Update and Patch Regularly: Regular updates and patches to all software, including the OS, can help prevent ransomware from exploiting known software vulnerabilities. 3. Employ Threat Intelligence: Use platforms that can detect and respond to threats in real-time to minimise damage and speed recovery. #Ransomware #BitLocker #CloudSecurity #CyberResilience #Panorama

Combining technical and human approach to drop the payload, this ransomware exploits memory in the machines to expand and deploy "New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks" 💡 This is a reminder for organization that combining technical security controls (detection and response tools) with awareness training is still key to reduce the likelihood of a successful attack 💡At the same time, attackers use access brokers to find valid credentials in order to drop the payloads in enterprise networks, this is where again, strong security controls will help, AND, training your users not to store credentials in browsers or weak spaces, and use strong password vaults instead, MFA and eventually passkeys. connected=hacked #cybersecurity https://lnkd.in/e5EZX-p3

We see new data exfil methods pretty much every day of the week. Not only are we seeing them, we are blocking them instantly and automatically. Some of these are amazing- the bad guys do their best to stay ahead of the cyber industry and traditional tools- just illustrates the power of BlackFog's #adx technology and stopping exfiltration.

🔒 Cyber threats are getting smarter, and we need to stay ahead. Jason (Jay) Mar-Tang, CISSP, CCSP from Pentera, reveals how attackers are now using advanced tactics like AI and identity theft to breach defenses. From phishing scams to deepfakes, they're constantly expanding their methods. Discover how these tactics could impact your organization and what you can do to protect yourself: https://okt.to/71Ohva InformationWeek #CyberSecurity

🔍 Cyber Insights 2025: The Evolution of Malware & Ransomware 🔍 As we move into 2025, the world of cybersecurity continues to evolve—especially when it comes to malware and ransomware. Key insights from industry experts are predicting how these threats will evolve over the next year. Darren Williams, our CEO, sheds light on the core issue: ransomware and extortion-based attacks will remain prevalent. He explains, "Anytime the word extortion is used, by definition it is ransomware." He emphasizes that the methods used by attackers may shift, but the goal remains the same—extortion. See what other experts are saying via @SecurityWeek: https://lnkd.in/eHEYdQsn #Malware #Ransomware #CyberSecurity #CyberLandscape #CyberPredictions #ThoughtLeaders #CyberExperts #IndustryExperts #CyberProfessionals #BlackFog #ADX

🔒 Cyber threats are getting smarter, and we need to stay ahead. Jason (Jay) Mar-Tang, CISSP, CCSP from Pentera, reveals how attackers are now using advanced tactics like AI and identity theft to breach defenses. From phishing scams to deepfakes, they're constantly expanding their methods. Discover how these tactics could impact your organization and what you can do to protect yourself: https://okt.to/YP7VsR InformationWeek #CyberSecurity