Zero Trusts News Today

Rapid 7s Deal On Monday, Rapid7 announced it had purchased the external threat intelligence firm IntSights Cyber Intelligence Ltd. for approximately $335 million in cash and stock. Rapid7 says it will merge Insight Cyber Intelligences external threat intelligence capabilities with its community-based threat intelligence to create a unified view of the threat landscape. Rapid7 plans to integrate IntSights external threat intelligence segment with its own platform, which will help enable faster t...

NIST Publishes Critical Software Security Guidance July 28, 2021 July 28, 2021 Compliance dangun127) • July 21, 2021     Photo: Mike via Flickr/CC New guidance from the National Institute of Standards and Technology spells out security measures for "critical software" used by federal agencies and minimum standards for testing its source code. The best practices could be a model for the private sector as well. NISTs r...

Senators Introduce Federal Breach Notification Bill July 28, 2021 July 28, 2021 Twitter Get Permission Sens. Mark Warner (right) and Marco Rubio introduced the Cyber Incident Notification Act of 2021 bill on Wednesday. A bipartisan group of senators formally introduced a federal breach notification bill Wednesday that would require federal agencies, federal contractors and organizations that are considered critical to U.S. national security to report security incidents to the Cybersecurity an...

Senior Executive Advisor - Workforce and Customer Identity and Access, Okta Mike Dessert provides global executive advisory services at Okta. Mike is an industry expert in Enterprise IT, with specializations in Identity andAccess Management (IAM) technology, large-scale software development, enterprise architecture, and DevSecOps. Prior to joining Okta, Mikeserved as an IT executive at a major Detroit-based Big3 Automotive Corporation over two decades, leading global solutions in Sales and Mark...

DOD and DHS Need More Collaboration on Cybersecurity Issues July 28, 2021 July 21, 2021 Twitter The Pentagon (Photo: Political Office via Flickr/CC) A greater level of cooperation is needed between the Department of Defense and the Department of Homeland Security to ensure that U.S. critical infrastructure is protected against various cyberthreats, according to an inspector generals report released this week. The report recommends that both the Defense Department and DHS complete the obligat...

GovInfoSecurity July 21, 2021 September 30, 2021 DougOlenick) • July 13, 2021     Get Permission REvils public shaming site, Happy Blog, is one of the components of the gangs infrastructure that has gone offline. (Watch for updates on this developing story.) The REvil, aka Sodinokibi, ransomware gangs infrastructure, including its darknet sites, were offline Tuesday, numerous security specialists report. The reason ...

Ransomware Landscape: REvil Is One of Many Operators July 21, 2021 September 30, 2021 euroinfosec) • July 12, 2021     REvil ransom note seen by victims of the ransomware attack involving Kaseyas software (Source: Cisco Talos) As the Biden administration attempts to force Russia to crack down on domestic cybercriminals, one challenge will be the sheer diversity of attack code being wielded. Another is that any proact...

A screenshot of a negotiating portal set up by the REvil ransomware group (Source: SecurityScorecard) Threat intelligence researchers are looking closely at REvil, the ransomware gang that infected up to 1,500 companies in a single swoop. A look at part of the groups online infrastructure shows clear lines to Russian and U.K. service providers that, in theory, could help law enforcement agencies but dont appear eager to help. On July 2, affiliates of REvil exploited several vulnerabilities in r...

US Senate Approves Jen Easterly as CISA Director July 21, 2021 September 30, 2021 Compliance Twitter Jen Easterly speaking at a New America Foundation event (Photo: New America via Flickr/CC) The Senate unanimously approved Jen Easterly to serve as director of the U.S. Cybersecurity and Infrastructure Security Agency via a Monday voice vote following weeks of delays and political infighting. CISA has been without a Senate-approved director since November 2020, when former President Donald Trum...

Kaseya Says Software Fully Patched After Ransomware Attack July 21, 2021 September 30, 2021 Compliance Compliance Twitter Kaseya Executive Vice President Mike Sanders (Source: Kaseya) Software developer Kaseya on Sunday released patches for its remote monitoring and management software, which had been exploited by ransomware attackers to infect up to 1,500 organizations. The FBI is probing the attack, and Miami-based Kaseya says its also been working closely with the U.S. Cybersecurity Infrast...