Tag: service
-
Cisco launches new identity access management products, services
First seen on scworld.com Jump to article: www.scworld.com/news/cisco-launches-new-identity-access-management-products-services
-
BalkanID Launches Self-Service IGA Lite with Transparent Pricing for Identity Governance
First seen on scworld.com Jump to article: www.scworld.com/news/balkanid-launches-self-service-iga-lite-with-transparent-pricing-for-identity-governance
-
Revenue Cycle Management Firm’s Data Breach Total Soars
ALN Medical Management Now Says 1.82 Million Affected in 2024 Hacking Incident. The number of people affected by a March 2024 hack on a healthcare revenue cycle management and billing services provider has soared in recent weeks to more than 1.82 million, as the company continues to file updated breach reports to state and federal…
-
Infinigate and Softcat provide investor cheer
Tags: serviceFull-year results and a Q3 trading statement underline that growth is out there for channel players pitching in-demand services and technologies First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366624838/Infinigate-and-Softcat-provide-investor-cheer
-
Cellcom Restores Regional Mobile Services After Cyberattack
Customers in parts of Wisconsin and Michigan could not make calls or send text messages for nearly a week after an incident on May 14, and service is still intermittent in some areas. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/cellcom-restores-regional-mobile-services-cyberattack
-
Unternehmen unterschätzen Risiken von Datenverlust bei SaaS-Anwendungen
Jeden Tag verlagern Unternehmen kritische Prozesse in Cloud-basierte Software-as-a-Service (SaaS)-Anwendungen. Gleichzeitig richten Cyberkriminelle ihre Aktivitäten verstärkt auf Cloud-Dienste aus und gefährden damit Unternehmen, wobei SaaS-Anwendungen inzwischen zu den präferierten Zielen der Cyberkriminellen gehören. Im neuen E-Book zeigt Arcserve auf, dass laut Markterhebungen […] First seen on netzpalaver.de Jump to article: netzpalaver.de/2025/05/28/unternehmen-unterschaetzen-risiken-von-datenverlust-bei-saas-anwendungen/
-
Adidas Data Breach Highlights Third-Party Risks: Why AI-Based Cybersecurity Solutions Are Essential
On May 23, Adidas disclosed a data breach resulting from a cyberattack on a third-party customer service provider, exposing sensitive customer information in multiple regions, including the U.S. and Europe. While Adidas did not name the vendor involved, the company emphasized that the breach impacted “a few million individuals,” and included data such as contact…
-
251 Malicious IPs Target Cloud-Based Device Exploiting 75 Exposure Points
On May 8, 2025, cybersecurity researchers at GreyNoise detected a highly orchestrated scanning operation targeting 75 known exposure points across the internet in just 24 hours. The campaign, executed by 251 malicious IP addresses”, all geolocated to Japan and hosted on Amazon Web Services (AWS)”, triggered a diverse array of 75 distinct behaviors, including exploitation…
-
If you use OneDrive to upload files to ChatGPT or Zoom, don’t
Tags: access, api, chatgpt, compliance, corporate, cybersecurity, data, google, governance, least-privilege, microsoft, mitigation, risk, saas, security-incident, service, strategy, threat, toolWeb app vendors aren’t off the hook: This could be bad news for security teams, according to Eric Schwake, director of cybersecurity strategy at Salt Security. “Sensitive secrets required for this access are often stored in an insecure manner by default,” Schwake said. “This situation presents a key API security challenge for security teams, and…
-
Threat Actors Weaponizing DCOM to Harvest Credentials on Windows Systems
Threat actors are now leveraging the often-overlooked Component Object Model (COM) and its distributed counterpart, Distributed Component Object Model (DCOM), to harvest credentials on Windows systems. As traditional red team methods like direct access to the Local Security Authority Subsystem Service (LSASS) face heightened scrutiny from Microsoft’s enhanced defenses and advanced Endpoint Detection and Response…
-
From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign
Stealer malware no longer just steals passwords. In 2025, it steals live sessions”, and attackers are moving faster and more efficiently than ever.While many associate account takeovers with personal services, the real threat is unfolding in the enterprise. Flare’s latest research, The Account and Session Takeover Economy, analyzed over 20 million stealer logs and tracked…
-
Mental Denial of Service: Narrative Malware and the Future of Resilience
Mental denial of service (DOS) is the manipulative content that hijacks the cognitive processing of individuals and institutions. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/mental-denial-of-service-narrative-malware-and-the-future-of-resilience/
-
Attackers hit MSP, use its RMM software to deliver ransomware to clients
A threat actor wielding the DragonForce ransomware has compromised an unnamed managed service provider (MSP) and pushed the malware onto its client organizations via … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/28/attackers-hit-msp-use-its-rmm-software-to-deliver-ransomware-to-clients/
-
CISA Releases Executive Guide on SIEM and SOAR Platforms for Rapid Threat Detection
In today’s rapidly evolving threat landscape, Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms have become foundational to organizational cybersecurity strategies. SIEM platforms collect, centralize, and analyze log data from diverse sources, such as endpoints, servers, cloud services, and network devices, using correlation rules and filters to detect anomalous…
-
How ‘Browserthe-Middle’ Attacks Steal Sessions in Seconds
Would you expect an end user to log on to a cybercriminal’s computer, open their browser, and type in their usernames and passwords? Hopefully not! But that’s essentially what happens if they fall victim to a Browser-in-the-Middle (BitM) attack.Like Man-in-the-Middle (MitM) attacks, BiTM sees criminals look to control the data flow between the victim’s computer…
-
MATLAB, Serving Over 5 Million Users, Hit by Ransomware Attack
MathWorks, the renowned developer of MATLAB and Simulink, has been grappling with the aftermath of a significant ransomware attack that began on Sunday, May 18, 2025. The incident, which affected both customer-facing and internal IT systems, prompted immediate notification to federal law enforcement and the mobilization of cybersecurity experts. As of May 27, many services…
-
‘Secure email’: A losing battle CISOs must give up
End-to-end encryption remains elusive: Email continues to be the dominant electronic communication tool today because it is well understood, relatively easy to use, and relatively inexpensive. By and large, businesses have approved email for sending confidential information, and we often convince ourselves that it is secure, can be secured with third-party tools, or it’s “good…
-
CISA Publishes ICS Advisories Highlighting New Vulnerabilities and Exploits
Tags: access, cisa, control, cyber, cybersecurity, exploit, government, infrastructure, service, tool, vulnerabilityOn May 27, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) released a new Industrial Control Systems (ICS) advisory”, ICSA-25-146-01″, highlighting a significant security vulnerability in the Johnson Controls iSTAR Configuration Utility (ICU) Tool. This tool is widely deployed for configuring and managing access control systems across critical infrastructure sectors, including commercial facilities, energy, government…
-
Will AI agent-fueled attacks force CISOs to fast-track passwordless projects?
Tags: access, ai, api, attack, authentication, breach, business, ciso, cloud, credentials, cyber, cybersecurity, data, fido, finance, framework, google, Hardware, identity, login, metric, microsoft, okta, passkey, password, phishing, privacy, risk, risk-management, service, technology, threat, tool, update, zero-trustPasswordless options: In retiring passwords, security leaders will need to consider their options, passkeys, biometrics, and third-party login services, looking for the best technical, usability, and security fit. There are pros and cons for each option, and in many cases CISOs may be guided towards one based on their existing environment.Passkeys, used by Microsoft, Samsung,…
-
DragonForce ransomware abuses SimpleHelp in MSP supply chain attack
The DragonForce ransomware operation successfully breached a managed service provider and used its SimpleHelp remote monitoring and management (RMM) platform to steal data and deploy encryptors on downstream customers’ systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dragonforce-ransomware-abuses-simplehelp-in-msp-supply-chain-attack/
-
Seceon Wins “MSP Platform Provider Vendor of the Year” at Technology Reseller Awards 2025
At Seceon, we’re honored to announce that we have been named the “MSP Platform Provider Vendor of the Year” at the Technology Reseller Awards 2025. This recognition is a meaningful milestone that celebrates our ongoing commitment to delivering an innovative, AI-driven cybersecurity platform designed to meet the evolving needs of Managed Service Providers (MSPs) and…
-
DragonForce operator chained SimpleHelp flaws to target an MSP and its customers
Sophos warns that a DragonForce ransomware operator chained three vulnerabilities in SimpleHelp to target a managed service provider. Sophos researchers reported that a DragonForce ransomware operator exploited three chained vulnerabilities in SimpleHelp software to attack a managed service provider. SimpleHelp is a remote support and access software designed for IT professionals and support teams. It…
-
DragonForce ransomware abuses MSP’s SimpleHelp RMM to encrypt customers
The DragonForce ransomware operation successfully breached a managed service provider and used its SimpleHelp remote monitoring and management (RMM) platform to steal data and deploy encryptors on downstream customers’ systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dragonforce-ransomware-abuses-msps-simplehelp-rmm-to-encrypt-customers/
-
Adidas Falls Victim to Third-Party Data Breach
Though Adidas said that no payment or financial information was affected in the breach, individuals who contacted the compamy’s customer service help desk were impacted. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/adidas-victim-third-party-data-breach
-
New Russian state-sponsored APT quickly gains global reach, hitting expansive targets
Laundry Bear, a group recently identified by Dutch intelligence and security services, stole work-related contact details on the Netherlands’ national police force in September 2024, Microsoft researchers said. First seen on cyberscoop.com Jump to article: cyberscoop.com/laundry-bear-void-blizzard-russia-apt/
-
Limerston Capital Acquires CyberCrowd to Launch UK Cybersecurity Services Platform
First seen on scworld.com Jump to article: www.scworld.com/news/limerston-capital-acquires-cybercrowd-to-launch-uk-cybersecurity-services-platform