For providers

A favorite post-exploitation tool continues to gain sophistication, with one recent example adding disguised log-in pages, credential stealing, and information gathering via services such as VirusTotal.

A favorite post-exploitation tool continues to gain sophistication, with one recent example adding disguised log-in pages, credential stealing, and information gathering via services such as VirusTotal.

Attacks leveraging the Citrix Bleed vulnerability, tracked as CVE-2023-4966, impacting Citrix NetScaler ADC and NetScaler Gateway appliances were noted by Cybersecurity and Infrastructure Security Agency Assistant Director for Cybersecurity Eric Goldstein to have been conducted by both state-sponsored threat operations and cybercrime groups, according to The Record, a news site by cybersecurity firm Recorded Future.

Qatari organizations participate in cybersecurity exercises to hone their incident response plans and processes.

Qatari organizations participate in cybersecurity exercises to hone their incident response plans and processes.

Biometric security on PCs isn't quite as bulletproof as you might think, as the line between sensors and host computers can be tampered with.

Biometric security on PCs isn't quite as bulletproof as you might think, as the line between sensors and host computers can be tampered with.

Cisco Designated VIP Stuart Clark reflects on life after earning his CCNA certification, from the importance of lifelong learning and engagement with the Cisco community to the value of short-form learning content like Snack Minutes, which cover emerging topics and reinforce foundational tech concepts.

[This is a Guest Diary by Jonah Latimer, an ISC intern as part of the SANS.edu BACS program]

As cybersecurity teams prepare for 2024, what are the top threats and technological challenges to prepare for?