The CDK Global Ransomware Attack: A Case Study in Supply Chain Disruption and Security Preparedness
|

The CDK Global Ransomware Attack: A Case Study in Supply Chain Disruption and Security Preparedness

In June 2024, a ransomware attack targeting CDK Global, a major provider of dealership management software (DMS), sent shockwaves through the American automotive industry. The attack crippled the operations of approximately 15,000 car dealerships across the US, highlighting the critical role of technology in modern supply chains and the devastating consequences of cyberattacks. Immediate Impact…

|

National cybersecurity labeling program expected in May for IoT devices

The US Senate has proposed a bill for the development of a national cybersecurity labeling program set to be introduced in May 2020. The program aims to tackle the issue of poor security measures in Internet of Things (IoT) devices and increase transparency for consumers. The labels will be specific to the device and manufacturer,…

|

TikTok faces US Ban

The US government has recently threatened to impose a ban on the popular video-sharing app, TikTok, if its Chinese owners, ByteDance, do not comply with their demands to sell a majority stake to American investors. This threat is part of ongoing concerns over the national security risks that could potentially be associated with Chinese-owned tech…

|

Shocking Findings from 2023 Third-Party Security Report

Introduction In February 2023, a third-party security report was released, revealing some shocking findings about the current state of cybersecurity. The report, which was conducted by a team of cybersecurity experts, analyzed data from various industries and companies around the world. The findings are alarming, and they highlight the need for companies to take cybersecurity…

|

White House Announces New National Cybersecurity Strategy

The White House has released a new National Cybersecurity Strategy detailing how the US government plans to secure cyber infrastructure, protect American citizens, and promote American values. The strategy has four pillars: protecting American infrastructure, combating cybercrime and improving incident response, promoting American influence abroad, and developing a cyber workforce. It also includes a plan…

|

What you need to know about the LastPass Hack

What’s happened? Just days before Christmas, when most people probably weren’t paying too much attention, password management service LastPass revealed that hackers had accessed customers’ password vaults. You’re probably thinking of the original announcement LastPass made back on August 25 2022, where it said that a hacker had managed to gain access to a developer’s…

Darknet’s Largest Mobile Malware Marketplace Threatens Users Worldwide

Darknet’s Largest Mobile Malware Marketplace Threatens Users Worldwide

Cybersecurity researchers have shed light on a darknet marketplace called InTheBox that’s designed to specifically cater to mobile malware operators. The actor behind the criminal storefront, believed to be available since at least January 2020, has been offering over 400 custom web injects grouped by geography that can be purchased by other adversaries looking to mount attacks…

A look back at Log4j shows fast reaction, slow remediation

A look back at Log4j shows fast reaction, slow remediation

It’s perhaps no surprise that when somebody comes up with a great fix in life, few people actually use it—many a Scrub Daddy, Squatty Potty, and Rapid Ramen Cooker stay sealed and unopened, despite being upgrades to their predecessors. In the security space, better versions of products are released all the time, at high speeds,…