Log4j Attack Surface Remains Massive

Log4j Attack Surface Remains Massive

Four months ago, the remote code execution hole exposed in the Apache Log4j logging tool still had a wide range of potential victims. Using the Shodan search engine, Rezilion discovered more than 90,000 Internet-exposed servers with a vulnerable version of the...
NVIDIA Confirms Employee Credentials Stolen in Cyberattack

NVIDIA Confirms Employee Credentials Stolen in Cyberattack

NVIDIA, famous for designing graphics processing units and integrated circuits, recently became the latest victim of a serious cyberattack. Officials confirm that the incident occurred on February 23, 2022, resulting in the online leaking of employee credentials....
Nearly Two-Thirds of Ransomware Victims Paid Ransoms in 2021

Nearly Two-Thirds of Ransomware Victims Paid Ransoms in 2021

Leading research and marketing firm CyberEdge Group, which serves companies in the cybersecurity industry, just published its ninth Cyberthreat Defense Report (CDR). This report acts as the standard for gauging organizations’ security postures, documenting the...
What You Need to Know About PCI DSS 4.0 New Requirements

What You Need to Know About PCI DSS 4.0 New Requirements

In keeping with its ongoing goal of safeguarding cardholder information, the PCI Security Standards Council (PCI SSC) is rolling out a new version of its Payment Card Industry Data Security Standard (PCI DSS). This updated iteration came from extensive feedback from...
New US Law to Require Cyber Incident Report

New US Law to Require Cyber Incident Report

Cybersecurity concerns have gained even greater significance in the recent Russia-backed SolarWinds sabotage and the Ukrainian war. In response, the US House and Senate will soon pass the Cyber Incident Reporting for Critical Infrastructure Act of 2022.  Shortly after...