Insights

In a recent incident, a prominent cyber security company discovered they had inadvertently hired a North Korean operative posing as an IT professional. This individual, using various AI tools, managed to infiltrate the company by joining as an employee, accessed its systems and attempted to plant malware. The incident has brought to light the increasing sophistication of cyber threats during the recruitment process. If a major cyber security firm can fall victim, other less security-savvy organisations face even greater risks and underscores the necessity for robust verification processes and heightened vigilance in recruitment.

Crowdstrike have now published their preliminary post incident report (PIR) into the issue that impacted 8.5m Windows hosts. Their preliminary report is available in full on the CrowdStrike website:https://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/)

Issue Overview and Impact

Palo Alto Networks has disclosed a critical (CVSS10) command injection vulnerability in Global Protect Gateway, which is the VPN component of PAN-OS powered networking appliances.

2023 has been another tumultuous year for cyber security, with a number of high-profile breaches and incidents making headlines around the world. From state-sponsored cyber-attacks to extortion campaigns, it’s clear that the threat landscape is constantly evolving. In this blog post, we take a look at some of the most reported on incidents of 2023. 

Today is Computer Security Day so what better time to take a closer look at a hot topic in the realm of cyber security, Threat Exposure Management.

With Microsoft Windows having a 74% share of the desktop OS market worldwide, it's a pivotal platform within most organisations' IT environments. Furthermore, considering that four out of every five Fortune 500 companies harness the power of Microsoft Office 365—nearly half of the office productivity software market—it’s clear why securing the Microsoft ecosystem is so crucial. 

Background On The Vulnerability:

Background On The Vulnerability:

Date Vulnerability was discovered by Citizen Lab: September 6^th/7^th

Continuing our series on the most significant cyber-attacks this year, Integrity360's incident response team has turned its attention to the cyber security trends that we expect to surface in the latter half of the year.  

Cyber security is an indispensable aspect of any business operation. Recognising and understanding vulnerabilities - the potential risks that could compromise an organisation's cyber security - are critical. These latent risks become real and potentially damaging threats when exploited by a threat actor or accidentally by user error, leading to disastrous consequences like data breaches, malware infections, financial loss, and/or a loss of business-critical services. 

In part 2 of our series on the major cyberattacks of 2023 we'll be examining the attacks on Royal Mail and JD Sports. We'll also take a closer look at one of the largest DDoS attacks ever documented and delve into the havoc caused by the Black Basta ransomware spree.