News

Latest news about B2B cyber security >>> PR agencies: add us to your mailing list - see contact! >>> Book an exclusive PartnerChannel for your news!

Cyberattacks: These four industries are the main targets
Cyberattacks: These four industries are the main targets

Healthcare, financial services, manufacturing companies, software-as-a-service and software providers are the industries that are most often the involuntary recipients of current malware campaigns. All areas of the economy and society are undergoing fundamental change. The long-term mission of digital transformation is accompanied by current challenges such as the pandemic and its consequences as well as the war in Ukraine. Politicians are responding to increased risk situations with new and stricter IT guidelines for an expanded circle of those affected. Even though companies of all sizes and industries are currently experiencing a sharp increase in hacker attacks, cybercriminals have different intentions behind these incidents. For all target groups…

Read more

Signed Git commits protect software supply chains
Signed Git commits protect software supply chains

A new open source project allows software developers and DevOPs to digitally sign Git commits easily and securely. A Git commit is a version control system that tracks changes in software projects. A Git commit is a snapshot that captures changes at a specific point in time, accompanied by a short report describing the adjustments. Keeper and The Migus Group developers are collaborating to develop an open source solution for signing Git commits with SSH keys stored in a user's Keeper Vault. The integration provides developers with a secure and encrypted repository for their SSH keys and eliminates the…

Read more

Eliminate vulnerabilities in the software supply chain faster
B2B Cyber ​​Security ShortNews

Attacks on the software supply chain continue to increase, due in part to companies' increasing reliance on numerous third-party vendors and service providers. To keep a close eye on the threats facing today's organizations, Tanium has now added SBOM to its vulnerability management solution. Open Source Software Threat "Over 92 percent of applications contain open source libraries that may contain hidden vulnerabilities such as Log4j, OpenSSL or Struts that attackers can exploit," said Nic Surpatanu, Chief Product Officer at Tanium. “Tanium SBOM is the only solution on the…

Read more

Cyber ​​risks in the software supply chain
Cyber ​​risks in the software supply chain

Log4Shell or Solarwinds are typical examples of attacks on companies through their software supply chain. It is characteristic that cybercriminals do not gain direct access to the target company, but attack via a back door. A comment from Trend Micro. If you look back at some recent attacks (esp. Solarwinds or Log4Shell), you will notice that they are playing more and more "over gangs". This means that the attackers no longer attack target companies directly, but via their (software) supply chain. Whether victims are attacked via compromised Solarwinds updates or vulnerabilities in Log4Shell - in both...

Read more