Security News

Cybersecurity firm Rootshell Security has had a busy month, earning recognition for its recent work that led to the identification of three significant vulnerabilities within Microsoft's suite of applications.   Its RedForce team, known for a persistent commitment to a safer digital world, has been instrumental in uncovering the vulnerabilities, officially known as Microsoft Outlook Spoofing Vulnerability (CVE-2023-33151), Microsoft OneNote Spoofing Vulnerability (CVE-2023-33140), and Microsoft Power Apps Spoofing Vulnerability (CVE-2023-32024). The flaws could have had...

With data from its SecurityCoach product, KnowBe4 has revealed the top 10 risky behaviours that employees have engaged in on their work devices. SecurityCoach helps IT/security professionals to develop a strong security culture by enabling real-time security coaching of their users in response to risky security behaviour. Leveraging an organisation’s existing security stack, IT/security professionals can configure their real-time coaching campaigns to immediately deliver a SecurityTip to their users related to a detected event. The...

Popular social media platform Discord has notified users it has suffered a data breach after a support agent’s account at a third party became compromised. A malicious individual then gained unauthorised access to the agent’s support queue, exposing user email addresses, Discord support messages and attachments sent via the ticket system. Discord - which has a user base of over 150 million monthly active users - has deactivated the compromised account and undertaken security checks...

With the proliferation of cyber attacks in all industries, organizations are beginning to grasp the growing significance of cyber risk and how this is an integral part of protecting and maintaining an efficient business. Ransomware is the single biggest cyber threat to global businesses; in fact, during the first half of 2022 alone, there were a total of 236.1 million cases of ransomware, which reflects the immense risk to which companies of all sizes are...

Hackers have launched a successful cyberattack against schools across the UK and has left confidential information related to pupils leaked online. In total, 14 schools have been impacted, with the sensitive data stolen including passport details, which were likely needed for trips abroad, as well as contracts and pay scales for members of staff. As reported by the BBC, the attack took place in 2022 with hacking group Vice Society named as the perpetrators. After...

Since 2014, the US government has suffered 822 breaches affecting nearly 175 million records. Based on the average cost per breached record (as reported by IBM each year), Comparitech estimate these breaches have cost government entities over $26 billion from 2014 to October 2022. In 2018 and 2019, the number of government breaches hit an all-time high with 116 and 118 breaches respectively. In 2020, breaches decreased to 107 before increasing again to 116 in...

Cato Networks, the world’s leading single-vendor SASE platform provider,  has announced it has grown its annual recurring revenue (ARR) from $1 million to $100 million in just five years. This best-in-class performance for enterprise network security compares with LinkedIn and faster than consumer-oriented brands, such as Twilio, Wix, Zapier, Canva, and Shopify.   Like these companies, Cato was the first to bring a born-for-the-cloud architecture to disrupt its category. Since its founding in 2015, Cato's...

Armis, the asset visibility and security company, has announced its Armis Partner Experience (APEX) Manage Program, a  partner program for Managed Service Providers (MSPs) and Managed Detection and Response Providers (MDRs). The APEX Manage Program is an evolution of the channel partner APEX Program launched by Armis one year ago. The company says APEX Manage aims to elevate and enrich service providers with a modern approach to building cyber investigation, detection, threat hunting, and remediation...

Illusive has announced the release of its enhanced Identity Threat Detection and Response (ITDR) platform. The new features enable organisations to visualise misconfigurations in and between Active Directory and Azure Active Directory domains, as well as to discover and remediate Kerberoastable identity risks and privileged accounts unmanaged by privileged access management (PAM). Additionally, Illusive visually correlates all identity risks with the MITRE ATT&CK framework so that organisations can more easily manage identity risk. According to...

It is a scenario anyone who works in an office can imagine all too easily; You’ve locked yourself out of your email accounts, and the myriad complexity of your own authentication systems leaves you locked out for hours at a time.  This scenario is felt even more keenly from the IT and security departments charged with managing this system of complexity, according to a new survey conducted by Axiad, who today announced the results of...