Michael Nadeau

As the EU's Digital Operational Resilience Act comes into force, financial sector firms, especially smaller ones, may face resources constraints, adding pressure on security talent markets.

The bug is affecting the management interfaces of the Secure Mobile Access appliances (SMA1000), allowing the execution of arbitrary OS commands.

The 18-year-old cybercriminal faces prosecution for multiple offenses, including discovery and disclosure of secrets, illegal access to computer systems, computer damage and money laundering.

Now in force, DORA has proved challenging for many IT leaders to achieve compliance, particularly around third-party providers, suppliers, and subcontractors.

The insecure deserialization and authorization bypass flaws could enable attackers to escalate privileges and run arbitrary commands.

Rapid7 researchers believe the BeyondTrust Remote Support attacks from December also exploited a zero-day flaw in PostgreSQL.

Anomaly detection can be powerful in spotting cyber incidents, but experts say CISOs should balance traditional signature-based detection with more bespoke methods that can identify malicious activity based on outlier signals.

Due to a misconfiguration, developers could be tricked into retrieving malicious Amazon Machine Images (AMI) while creating EC2 instances.

Threat actors increasingly using stolen credentials to compromise cloud assets, warns the company's annual threat report.

Businesses that install and own solar distributed energy resources increase their attack surface and that of the electric grid.