Microsoft to Mandate Multi-Factor Authentication for All Azure Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has said that all Azure users will have to use multi-factor authentication (MFA) starting in July. This is a big step to make the cloud safer. This project is part of a larger attempt by Microsoft to improve security …

Darkgate Malware Weaponizing XLSX, HTML And PDF To Attack Windows Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often target XLSX, HTML, and PDF files as they are widely used, and their trustable file formats also attract them. This makes it easier to deliver them successfully to recipients who may not be aware. Forcepoint researchers recently asserted …

Top 10 Best Managed Service Providers (MSP) for CISO, CTO & IT Managers – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

MSP or managed service providers, is an application designed to streamline the delivery and management of IT services to multiple customers.  It is a centralized platform that automates administrative tasks such as user provisioning, software licensing, and patch management.  Streamlines …

PoC Exploit Released for Ivanti EPMM MobileIron Core

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed vulnerability, CVE-2024-22026, has been found in Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core. This vulnerability allows a local attacker to gain root access to affected systems. The severity of this vulnerability is currently undetermined. CVE-2024-22026: Local …

Hackers Exploiting Microsoft’s Quick Assist Tool To Deliver Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often target remote assist tools because they create a direct channel to access desired systems with minimum effort.  These tools have been built for remote control and access purposes, which makes them very appealing targets for attackers looking to …

Earth Hundun Hacker Group Employs Advanced Tactics to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Earth Hundun, a notable Asia-Pacific malware organization, uses Waterbear and Deuterbear. We first encountered Deuterbear in Earth Hundun’s arsenal in October 2022, signaling its implementation. The industry distribution of endpoints infected by Waterbear and Deuterbear since 2022. This report describes …

Palo Alto Networks Buys IBM’s QRadar

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has made a significant decision to enhance its cloud security services by acquiring IBM’s QRadar cloud security assets. The acquisition will allow Palo Alto Networks to integrate IBM’s QRadar security information and event management (SIEM) software into …

Apple Safari Zero-Day Flaw Exploited At Pwn2Own : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple has released security updates to address a zero-day vulnerability in its Safari web browser that was exploited during this year’s Pwn2Own Vancouver hacking competition.  This issue, identified as CVE-2024-27834, was fixed by enhanced checks on macOS Monterey and macOS …

Authorities Seized Notorious Data Leak Site BreachForums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The notorious data leak site BreachForums has been taken over by the police. Cybercrime and data leaks are still being fought, but this is a big win. A Brief History of BreachForums As a replacement for the notorious RaidForums, BreachForums …

LogRhythm and Exabeam to Merge to Boost SIEM & SOAR

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

LogRhythm and Exabeam, two leading cybersecurity companies, announced today their intent to merge in a transformative deal that will create a powerful force in the security operations and analytics market. LogRhythm is a world-class cybersecurity company that delivers comprehensive security …