Page 13 - Guidepoint Security News Today

A nurse tends to a COVID-19 patient. (US Navy Mass Communication Specialist 2nd Class Sara Eshleman, Public domain, via Wikimedia Commons) In a newly published strategic analysis report, the CyberPeace Institute this week conveyed the exacting toll that cyberattacks are taking on the health care industry, especially the human impact on health care staffers, patients and society. In response, the non-profit has offered a glimpse into its work-in-progress “Accountability Framework,” des...

Microsoft Exchange attack timeline (Source: ESET) Serious vulnerabilities in Microsoft Exchange have been exploited by at least 10 advanced persistent threat groups that have been collectively been hitting thousands of companies over the last three months, security researchers warn. Full details of the attacks and groups involved - when known - have been released by researchers at Slovakia-based security firm ESET. They say at least several APT groups also began attacks that exploit the flaws, ...

If ransomware and data exfiltration attacks that targeted hospitals and vaccine researchers during the pandemic signaled a cyber hygiene crisis in health care, the SolarWinds supply chain attack demonstrated just how deep the problem goes.

Application Security Startup Snyk Raises $300M To Go Global Snyk plans to use some of its Series E proceeds to build out go-to-market teams in Australia, India, Japan, Korea, New Zealand and Singapore and has quadrupled its valuation since the start of 2020 to $4.7 billion. By Michael Novinson March 10, 2021, 10:40 AM EST Snyk has closed its Series E funding round on a monster $4.7 billion valuation as the red-hot startup looks to expand its presence in Asia-Pa...

SolarWinds Hack — New Evidence Suggests Potential Links to Chinese Hackers A malicious web shell deployed on Windows systems by leveraging a previously undisclosed zero-day in SolarWinds Orion network monitoring software may have been the work of a possible Chinese threat group. In a report published by Secureworks on Monday, the cybersecurity firm attributed the intrusions to a threat actor it calls Spiral. Back on December 22, 2020, Microsoft disclosed that a second espionage group may have...

(Source: Mike via Flickr) The SolarWinds supply chain attack should prompt federal agencies and others to rethink how they approach security issues - especially identity and access management, according to a breakdown of the attack presented this week by the National Institute of Standards and Technology and the U.S. Cybersecurity and Infrastructure Security Agency. At NISTs Information Security and Privacy Advisory Board meeting, Jay Gazlay, a technical strategist with CISA who has been exami...

"Let’s move off this platform as soon as possible."  In the case of Accellions FTA, reverse engineering enabled attackers to drop a web shell - a script that enables remote execution of commands - onto any server running the FTA software, according to FireEyes Mandiant incident response group, which Accellion hired to investigate. The web shell allowed attackers to bypass authentication, remotely execute code on the vulnerable systems and steal data. In at least some cases, stolen data ende...

On last Mondays episode of "The Good Doctor," Dr. Shaun Murphy (Freddie Highmore) interrupts his girlfriend Lea Dilallo (Paige Spara), the hospitals IT director, as she investigates a ransomware attack on the health care facilitys network. (ABC/Jeff Weddell) On the ABC medical drama "The Good Doctor," the surgeons at San Jose St. Bonaventure Hospital constantly find themselves making life-or-death ethical and medical decisions. But last Monday night, when the facility was infected with a ransom...

GovInfoSecurity Twitter Get Permission New Zealands Reserve Bank is one victim of a breach involving Accellions FTA product. (Source: Wikimedia Commons) Several data breaches stemming from unpatched vulnerabilities in Accellions File Transfer Appliance have been revealed. What went wrong? Where does the fault lie? And what can organizations do about it? It’s not a straightforward story, and it points to problems around balancing use of an aging software product with risk, a reluctance to mo...

Posted on 360 GuidePoint Security, a cybersecurity solutions leader enabling organizations to make smarter decisions and minimize risk, announced today that it was named by the Northern Virginia Technology Council (NVTC) as a 2020 Tech 100 Honoree, and that GuidePoint Security founder and managing partner, Michael Volk, was named among the 2020 NVTC Tech 100 Executives. The NVTC Tech 100 is a list of groundbreaking companies, leaders...