Author: Staff Writer

Fast Facts La Poste, France’s postal service, has experienced a major network outage for over 12 hours, impacting all of its IT systems. Critical services such as the website, Digiposte, digital ID, and mobile app are down, though in-person postal services remain operational. The bank’s online and app services are also affected, but payments and SMS verification continue to function. The cause is suspected to be a DDoS attack, with no official statement on resolution time or potential Christmas delivery disruptions. What’s the Problem? La Poste, France’s national postal service, experienced a major outage that has lasted for over twelve…

Essential Insights HardBit 4.0 is an advanced ransomware strain that employs sophisticated evasion techniques, including malware obfuscation, registry manipulation, and passphrase protection to avoid detection and analysis. It primarily gains initial access via brute-force attacks on open RDP and SMB services, then quickly moves laterally by harvesting credentials to expand its foothold. The malware uses Neshta, a legacy virus, as a dropper to deliver and execute HardBit 4.0, bypassing traditional antivirus tools through code modification and persistence strategies. HardBit 4.0 specifically targets security defenses by disabling Windows Defender features and employs multi-stage deployment, making detection and mitigation particularly challenging without…

Summary Points Coupang is sued for taking nearly a month to disclose a data breach that exposed personal data of 33.7 million customers, violating SEC rules requiring disclosure within four days. The breach was caused by a former employee retaining valid authentication keys after leaving, highlighting organizational failures in security procedures, including inadequate key revocation. This lawsuit is notable as it possibly among the first to challenge SEC cybersecurity disclosure compliance, accusing Coupang of materially false statements in quarterly reports about its security risks. In South Korea, Coupang faces potential fines up to $814 million under local privacy laws, with…

Fast Facts A critical vulnerability (CVE-2023-52163) in Digiever DS-2105 Pro NVRs allows attackers to inject commands due to missing authorization, enabling potential system compromise. The flaw is actively exploited in the wild, posing significant risks for surveillance systems, including video manipulation and network access, though specific attack details are undisclosed. Federal agencies must remediate this vulnerability by January 12, 2026, using patches, network segmentation, and mitigations, with immediate action recommended for all impacted organizations. CISA has added this vulnerability to the KEV catalog, emphasizing its severity and urging organizations to prioritize timely patches to prevent exploitation. Problem Explained On December…

Summary Points Regular Cyber Risk Assessments are crucial for CISOs to identify vulnerabilities, prioritize security measures based on asset criticality, and ensure compliance with regulations like GDPR and PCI DSS. Effective risk assessments enable organizations to understand their data exposure, with findings highlighting that a significant portion of cloud data is accessible internally and often lacks multi-factor authentication, increasing breach risk. Data breaches can be extremely costly, averaging $4.44 million per incident, emphasizing the importance of understanding and protecting data assets, especially since stolen data is not recoverable like infrastructure. Implementing frequent risk evaluations provides measurable security improvements, helps allocate…

Quick Takeaways The cloud security industry is currently chaotic, filled with outdated tools but also emerging valuable innovations like AI and automation, signaling a need for modernization. The podcast episodes highlight key themes such as transforming legacy SIEM systems with AI, moving beyond outdated vulnerability management, and understanding AI’s practical capabilities versus hype in security. Thought leaders emphasize that AI should augment human analysts rather than replace them, and true modernization involves strategic transformation rather than simple migration. Industry focus is shifting towards realistic AI adoption, effective security automation, and addressing complex challenges like securing global platforms and balancing regulatory…

Fragmentation of Identity Systems: Organizations often use multiple, disjointed identity and network access solutions, creating vulnerabilities that cyber attackers can exploit. Risks of AI Exploitation: The use of numerous tools increases the risk of breaches, with 79% of organizations using multiple solutions experiencing a rise in significant breaches, as AI enhances cyber threats. Access Fabric Approach: A unified Access Fabric integrates identity and network access, continuously evaluating trust in real-time, enhancing security by eliminating gaps and adapting to context changes. Effective Security Characteristics: An Access Fabric solution must be contextual, connected, and continuous, allowing for real-time, informed access decisions that…

Quick Takeaways Strategic Expansion: INE Security is significantly expanding in the Middle East and Asia, focusing on regions like KSA, UAE, and Egypt, to meet the growing demand for practical cybersecurity training amid major digital transformation initiatives. Innovative Training Model: The company offers a cost-effective, subscription-based learning platform that provides unlimited access to comprehensive training resources, including hands-on labs, designed to address skill gaps efficiently. Focus on Competence: INE emphasizes verifiable skills over mere certification, preparing cybersecurity professionals with essential competencies in cloud security, incident response, penetration testing, and advanced networking. Regional Partnerships: Collaborating with local training providers and academic…

Fast Facts Credential-Based Attacks: A coordinated hacking campaign is targeting Palo Alto Networks GlobalProtect and Cisco SSL VPNs through automated credential probing, with no exploitation of vulnerabilities. High Volume of Attempts: Over 1.7 million login attempts were recorded, primarily from a centralized hosting provider, highlighting the extensive scale of the attack. Opportunistic Brute Force: The attacks on Cisco SSL VPNs saw a spike in unique attacking IPs, indicating a rise in opportunistic hacking rather than targeted efforts. Shared Tools and Origins: Both Palo Alto and Cisco attacks use similar infrastructure and tools, corroborating connections between the campaigns. Current Threat Landscape…

Summary Points CISA’s new analysis reveals that Brickstorm malware, used by a China-linked threat group, has targeted multiple U.S. organizations in a prolonged campaign, showcasing advanced stealth capabilities. The malware employs encrypted WebSocket connections for command and control, and CISA has released detection signatures and compromise indicators for newly discovered samples. CISA collaborates with the NSA and Canadian cybersecurity authorities to enhance threat insights and reduce risks associated with this ongoing activity. Recent reports indicate the threat group Warp Panda has exploited vulnerabilities in VMware vCenter environments, maintaining long-term access to compromised networks. Understanding the Threat of Brickstorm Malware The…