Category: Security

Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: VMware critical code vulnerability

Cybersecurity Threat Advisory: VMware critical code vulnerability

VMware has published a security advisory regarding a critical out-of-bounds write vulnerability (CVE-2023-34048) that has been fixed in the latest updates by VMware. The vulnerability shared in this Cybersecurity Threat Advisory has received a critical severity rating by VMware. It...

/ November 1, 2023
How MSPs should navigate the rise of cryptomining

How MSPs should navigate the rise of cryptomining

Bitcoin value has been steadily climbing over the last year. Between March 2022 and November 2022, Bitcoin prices crashed from over $47,000 to around $16,000, however rising investor confidence has pushed Bitcoin back up over the $35,000 mark in October...

/ November 1, 2023
MSSPs should uplevel cybersecurity conversations to board-level

MSSPs should uplevel cybersecurity conversations to board-level

A survey of 654 board of directors conducted by PwC finds well over a third (38 percent) of respondents have consulted third-party experts to increase efforts in becoming more aware of cybersecurity threats. In addition, nearly three-quarters (64 percent) have...

/ October 30, 2023
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: F5 BIG-IP RCE vulnerability

Cybersecurity Threat Advisory: F5 BIG-IP RCE vulnerability

This Cybersecurity Threat Advisory involves a critical vulnerability discovered in F5 BIG-IP products, identified as CVE-2023-46747. The vulnerability allows unauthenticated remote code execution and poses significant security risks. With a CVSS score of 9.8, immediate attention is required to mitigate...

/ October 27, 2023
Cybersecurity Awareness Month: Tips to follow year-round

Cybersecurity Awareness Month: Tips to follow year-round

While Cybersecurity Awareness Month serves as a reminder for everyone to follow cybersecurity best practices, strong awareness should continue year-round. This month, the Cybersecurity and Infrastructure Security Alliance released their “Secure Our World” awareness campaign that aims to broadly promote cybersecurity...

/ October 26, 2023
New FAR-reaching rules for MSPs

New FAR-reaching rules for MSPs

Managed service providers (MSPs) must navigate a complex patchwork of international, national, and local cybersecurity laws and regulations, and soon, there will be even more rules to follow. On October 3, 2023, the Federal Acquisition Regulation (FAR) Council released two...

/ October 25, 2023
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: Increased cyberattacks unveiled

Cybersecurity Threat Advisory: Increased cyberattacks unveiled

This Cybersecurity Threat Advisory looks at a threat actor who is targeting various private sector entities in Israel. Read the recommendations below to implement a layered security approach to protect against these cyberattacks. What is the threat? Microsoft has unveiled...

/ October 25, 2023
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: NetScaler vulnerability exploited

Cybersecurity Threat Advisory: NetScaler vulnerability exploited

A critical information disclosure vulnerability in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway has been exploited in the wild as a zero-day vulnerability beginning in late August 2023. This vulnerability is identified to be exploited remotely and with no...

/ October 24, 2023
energy and utilities
Email-borne attacks hit energy and utilities harder than most other sectors

Email-borne attacks hit energy and utilities harder than most other sectors

The energy and utilities industry is part of the world’s critical infrastructure. Without reliable access to electricity, natural gas, renewables, water supplies, and more, many things we rely on will grind to a halt with potentially devasting consequences for companies,...

/ October 24, 2023
Guarding the Gates: The rise of network protection in the 1990s

Guarding the Gates: The rise of network protection in the 1990s

As part of our 5-part series on the evolution of cybersecurity, check out our second article below that covers how the security industry laid the groundwork for a more holistic approach to cybersecurity. We are continuing our series that explores...

/ October 23, 2023