Page 2 - Right Security Testing News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Get Permission The U.S. federal court system is investigating an "apparent compromise" of a confidential electronic filing system used for sensitive legal documents, according to the Administrative Office of the U.S. Courts. The courts also have suspended their use of the hacked SolarWinds Orion network monitoring platform. In addition, the courts are immediately changing their security procedures, temporarily accepting sensitive legal documents only on paper or via secure devices, such as thumb drives, rather than through the network. The administrative office says it’s working with the U...

U.S. Secretary of State Mike Pompeo The U.S. Department of State has announced plans to create a Bureau of Cyberspace Security and Emerging Technologies to enhance its security and help it deal with international cybersecurity issues. But it remains to be seen if those plans will be carried out by the incoming Biden administration, which has announced other cybersecurity steps. Secretary of State Mike Pompeo announced Thursday that he has directed the State Department to create the bureau. The unit was originally proposed in 2018 to lead U.S. government diplomatic efforts on a wide range of i...

Get Permission Reacting to news reports claiming hackers may have used Czech software firm JetBrains’ TeamCity tool as an initial infection vector during the attack against SolarWinds, JetBrains CEO Maxim Shafirov says the company has not been contacted by investigators. But he says customer misconfiguration of TeamCity could have enabled a hack. "JetBrains has not taken part or been involved in this attack in any way," the CEO says. He adds, however, that "it’s important to stress that TeamCity is a complex product that requires proper configuration. If TeamCity has somehow been used in...

Retired Gen. Keith Alexander, president, IronNet Cybersecurity He has commanded armed forces and directed the National Security Agency. Now, he's president of vendor IronNet Cybersecurity. From this unique perspective, retired General Keith Alexander says the SolarWinds breach is "a call for action." There's plenty of speculation about the breach's scope, damage and attribution. But it's clear to Alexander that the U.S. public and private sectors have been dangerously exposed. "The breach highlights a strategic vulnerability our nation has, and we should be very concerned,” Alexander says. ...

Get Permission The Russian hacking group suspected of leveraging a tainted SolarWinds software update to infiltrate as many as 18,000 organizations is presenting a forensics challenge unlike any other. To ensnare such a large group of private companies, government agencies and organizations is the equivalent of factory ocean trawler scraping the seabed. The question now for organizations is whether they were selected by the hackers for further probing, says Joe Slowik, senior security researcher at DomainTools (see: “There’s a lot of work to do,” Slowik says. “I expect a lot of hol...