SolarWinds Puts the Blame on their Intern for the Supply Chain Attack
As cyber-researchers look into the Solarigate supply chain attack and measure it's true impact, the company blamed one of its intern for a critical password lapse that went unnoticed for several years. The password is said to have been "solarwinds123" and is…
Ransomware attack costs Universal Health Services $67 Million
Universal Health Services (UHS) in its recent earnings report revealed that a ransomware attack last fall, left them with a whopping pre-tax loss of $67 million. In the report, UHS referred to the cyberattack as an "information technology security…
National Security Agency asks organizations to embrace the Zero-Trust security model
The National Security Agency (NSA) has released Cybersecurity Information Sheet: Embracing a Zero Trust Security Model, which provides information about, and recommendations for, implementing Zero Trust within networks. The Zero Trust security model is a set of IT system…
Microsoft 365 update ensures connectivity even during uncertain internet access conditions
Microsoft 365 users can breathe a sigh of relief as the company is updating its policy regarding offline access of applications. The previous policy stated that the devices must connect to the internet at least once every 30 days to ensure that all apps are up to date. Now…
IBM patches critical flaw that could allow remote attackers to execute code
IBM patched a critical buffer-flow error that affected its Integration Designer toolset. The error has the potential of being exploited to enable the execution of remote codes. The flaw (CVE-2020-27221) was critical in severity as it has a CVSS base score of 9.8 out of…
Clubhouse audio data breached after third-party developer creates Android app
Clubhouse, the iOS-only audio-based social app that has been on the news for quite a while, is trending now for not-so-great reasons. A third-party developer from mainland China designed an open-source app for Android that allowed users to access the audio platform's…
Microsoft announces advancements in Azure Front Door and Azure Firewall
Microsoft announced that two of its security services, Azure Front Door and Azure Firewall have been updated with improvements. Azure Front Door now comes with two new products in the preview stage, Standard and premium, while Azure Firewall has a Premium option in the…
Securing Machine identities is cyber-hygiene 101 in the digital transformation era
Aspredicted by IDC, there will be 55.7 billion connected devices worldwide by 2025, out of which 75% will be connected to an IoT platform. To communicate securely, each machine needs a unique identity to authenticate and secure communications. Machines are identified…
Active Directory's architectural limitations taken advantage of during Solorigate, says CrowdStrike CEO
During the Feb 23rd senate hearing on SolarWinds Orion software hack, George Kurtz, president, and CEO of CrowdStrike pointed towards an 'architectural limitation' in Active Directory federation Service that was taken advantage of during the attack. "Significantly…
Microsoft offers free tool to detect signs of SolarWinds malware code
Microsoft is helping organizations that are investigating whether they are victims of the Solorigate attack by offering them a free tool, the CodeQL queries that the company used to scan its source code for after the attack. the queries Microsoft used with CodeQL identify…