Cybersecurity

City of Grass Valley, California, suffers data breach

January 11, 2022

Grass Valley, California has suffered a data breach.

Researchers find critical RCE security vulnerability in H2 database console

January 11, 2022

The JFrog security research team has disclosed an issue in the H2 database console, which was issued a critical CVE — CVE-2021-42392. This issue has the same root cause as the Log4Shell vulnerability in Apache Log4j.

Active directory cyber hygiene checklist: 11 steps to securing AD

Sean Deuby

January 11, 2022

Monitoring for unusual activity, hardening access privileges and regularly testing backups are among the top strategies to mitigate cyber threats targeting the active directory (AD) of an organization.

Initial access in cyberattacks: Common adversary methods and mitigation strategies

Chris Ballod Thomas Brittain Jessica Venturo

January 11, 2022

Investigate the three common methods for initial access in cyberattacks and how best to mitigate cyber threats to an organization.

John Mbuthia named CISO of Gore Mutual

January 10, 2022

John Mbuthia, cybersecurity and technology exec, has been named the first Chief Information Officer at Gore Mutual Insurance Company.

Security attack hits Illinois fertility centers

January 10, 2022

The Fertility Centers of Illinois (FCI) has notified nearly 80,000 current and former patients that their information may have been compromised.

Attackers exploit Google Docs with malware, phishing

January 10, 2022

Attackers are exploiting Google Docs to conduct phishing and inject malware.

Nominate a female security professional for Security magazine's annual Women in Security

January 10, 2022

We are looking for female enterprise security professionals that demonstrate a positive influence on their peers, their departments, and/or the security industry as a whole. Nominate someone today!

New York OAG notifies 17 companies of security breaches

January 7, 2022

The New York Office of the Attorney General (OAG) notified 17 well-known online retailers, restaurant chains and food delivery services that have been the victims of credential stuffing attacks.