Szolgáltatóknak

Technological adoption, demographics, politics, and uniquely Latin American law enforcement challenges have combined to make the region uniquely fertile for cyberattacks.

SolarWinds CISO Tim Brown discussed the topic at the CyberLawCon Conference.

Ransomware operations have exploited 28% of security flaws in the catalog in attacks last year.

Intrusions conducted by APTs were noted by Group-IB to rise by 58% in 2024.

The DeFi protocol's attackers were associated with Tornado Cash transactions and cross-chain swaps.

The Trump administration hasn't said much yet about cybersecurity, but three Biden executive orders that were left standing indicate what its policies may be.

Zapier immediately revoked the unauthorized user's access following the discovery of the incident.

Quantum computing threatens traditional encryption, and attackers are already preparing. With new NIST standards, the urgency to adopt quantum-resistant cryptography is clear. Cisco leads the transition with secure migration, risk assessments, and Zero Trust integration. Protecting infrastructure integrity is key—the quantum era is here. Are you ready?

Cloud service providers struggle with security in hybrid cloud use cases, but multicloud defense can help. Learn how in our blog.

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability CVE-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information. Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.