Author: Staff Writer
Staff Writer
John Marcelli is a staff writer for the CISO Brief, with a passion for exploring and writing about the ever-evolving world of technology. From emerging trends to in-depth reviews of the latest gadgets, John stays at the forefront of innovation, delivering engaging content that informs and inspires readers. When he's not writing, he enjoys experimenting with new tech tools and diving into the digital landscape.
Essential Insights Cyberattack on Kettering Health: The Interlock ransomware gang recently claimed responsibility for a cyberattack on Kettering Health, disrupting operations and compromising sensitive data from over 15,000 employees and 14 medical centers in western Ohio. Data Breach Details: Interlock reportedly stole 941 GB of data, including 732,489 documents containing sensitive information such as patient data, payroll records, police files, and identity scans like passports. Operational Impact: The attack, disclosed on May 20, forced Kettering Health to revert to manual processes, cancel elective procedures, and caused significant disruptions in patient care and communication. Emerging Threat: Interlock, a newly formed ransomware…
Welcome to your Daily CyberTech Highlights! Each day, we bring you the most essential news and insightful analysis from the world of Cybersecurity, Cloud security, Data protection, Data privacy and Technology. Stay informed on the latest trends, threats, and innovations shaping the digital landscape, so you can make informed decisions and stay ahead of the curve. Let’s dive into today’s top stories! Daily CyberTech Highlights Brand Covered: Fortinet Headline: Fortinet Launches Cybersecurity Curriculum in Australia to Boost Digital Resilience in Schools Fortinet, the global cybersecurity leader driving the convergence of networking and security, announced the rollout of its Security Awareness and Training Service: Education Edition curriculum across…
In today’s cloud-first world, managing and securing sensitive data has become a priority for organizations of all sizes. Data Security Posture Management (DSPM) has emerged as the preferred solution to this growing challenge. DSPM helps enterprises gain real-time visibility into their data across multi-cloud environments, allowing them to identify and mitigate risks such as shadow data and excessive access before they lead tobreaches. DSPM has rapidly gained popularity as companies are increasingly recognizing the need to take a proactive approach to data security. Unlike traditional methods, DSPM is built for fast moving cloud and on-prem data, providing advanced data classification,…
The VAST AI Operating System, now paired with Cisco UCS and Nexus platforms, and the Hyperfabric AI solution, delivers a unified, zero-trust infrastructure blueprint to accelerate enterprise-scale intelligent systems VAST Data, the AI Operating System company, announced the expansion of its strategic partnership with Cisco to deliver a fully integrated and validated AI infrastructure stack that spans compute, networking, storage, and observability. The VAST AI Operating System is now available directly through Cisco’s Global Price List (GPL) and is fully supported by Cisco as part of the joint solution – simplifying how enterprises implement, operate, and scale modern AI environments…
Fast Facts Malicious GitHub Campaign: A hacker is exploiting hackers, gamers, and researchers by distributing infected source code on GitHub, particularly using the Sakura RAT, which contains hidden backdoors for remote access. Automated Deception: The malicious repositories use automated commits to create an illusion of activity and legitimacy, with one repository showcasing nearly 60,000 commits in just a few months. Multi-Stage Infection Process: Downloading and building the compromised code initiates a multi-step infection involving VBS scripts and PowerShell, ultimately leading to the installation of various info-stealers and remote access trojans. Widespread Targeting: While primarily aimed at hackers, the campaign also…
Welcome to your Daily CyberTech Highlights! Each day, we bring you the most essential news and insightful analysis from the world of Cybersecurity, Cloud security, Data protection, Data privacy and Technology. Stay informed on the latest trends, threats, and innovations shaping the digital landscape, so you can make informed decisions and stay ahead of the curve. Let’s dive into today’s top stories! Daily CyberTech Highlights Brand Covered: Vectra AI, Zscaler Headline: Vectra AI and Zscaler Deepen Alliance for Enhanced SASE Traffic Visibility Vectra AI, Inc., the cybersecurity AI company that protects modern networks from modern attacks, announced an expanded technical integration with Zscaler, the…
Essential Insights AS-REP Roasting Threat: AS-REP roasting targets Active Directory user accounts without Kerberos pre-authentication, allowing attackers to exploit vulnerabilities by sending AS-REQ requests to extract Ticket Granting Tickets (TGTs) for offline brute-force attacks. Cybersecurity Risk: Major cybersecurity agencies highlight AS-REP roasting as a critical technique affecting Active Directory security, contributing to 44.7% of breaches linked to stolen credentials, making this a significant concern for organizations. Preventative Measures: Organizations can mitigate risks by enforcing Kerberos pre-authentication, identifying vulnerable accounts with specific scripts, and monitoring network activity through logging techniques tied to Event IDs indicating TGT requests or failed logins. Password…
Fortinet showcases free, education-focused training service that builds foundational cyber awareness among students at the 2025 AIS NSW ICT Management and Leadership Conference – Digital Directors Fortinet, the global cybersecurity leader driving the convergence of networking and security, announced the rollout of its Security Awareness and Training Service: Education Edition curriculum across all primary and secondary schools in Australia. Technology is increasingly embedded in every aspect of our daily lives. Building cyber resilience starts with early education and Fortinet is committed to equipping students and educators with the skills they need to operate safely and responsibly online. The launch of Fortinet’s curriculum in…
Fast Facts Targeted Social Engineering: The hacker group identified as UNC6040 is conducting social engineering attacks against multi-national companies, posing as IT support to manipulate employees into installing a malicious version of Salesforce’s Data Loader application. Data Exfiltration Process: Once access is granted, attackers export sensitive Salesforce data and subsequently use the access to infiltrate other platforms like Okta and Microsoft 365, leading to broader data exfiltration. Extortion Tactics: After initial intrusions, attackers may take months to extort companies, claiming affiliation with the notorious ShinyHunters group to enhance pressure on victims. Security Recommendations: Google advises organizations to restrict API permissions,…
TrustLogix, a leading provider of AI-powered security platforms, introduced advanced AI-powered data security and compliance capabilities for Snowflake, the AI Data Cloud company, at Snowflake’s annual user conference, Snowflake Summit 2025. By leveraging these AI-powered data security capabilities, joint customers can harness the power of Snowflake data and AI, and maintain access and compliance controls. “As organizations increasingly rely on the Snowflake AI Data Cloud for secure data sharing and AI workloads, managing complex access controls in highly regulated environments is paramount,” said Anoosh Saboori, Head of Product Security at Snowflake. “TrustLogix’s platform leverages and complements Snowflake’s native capabilities with complex requirements like…