Enterprise Technical Security That Matters

What is the NIST Cybersecurity Framework?

The National Institute of Standards and Technology, or NIST, helps organizations to better understand and manage their cybersecurity risks. NIST does this through its Cybersecurity Framework. BY DEVOPS.COM I January 11, 2021

Ransomware Attack Hits Short Line Rail Operator OmniTRAX

Colorado-based short line rail operator and logistics provider OmniTRAX was hit by a recent ransomware attack and data theft that targeted its corporate parent, Broe Group. By Yahoo Finance I January 11, 2021

Obfuscation Techniques in Ransomweb “Ransomware”

As vital assets for many business operations, websites and their hosting servers are often the target of ransomware attacks — and if they get taken offline, this can cause major issues for a business’ data, revenue, and ultimately reputation. By Luke Leal I January 12, 2021

Lokibot Stealer Comes with Added Features to Hide Better While Attacking Targets

The Lokibot malware is used by cyber attackers primarily for stealing credentials from a compromised system. In a recent campaign, a new version of the malware has been found equipped with more misdirection and anti-analysis features. By Cyware Alerts I January 13, 2021

Misconfigurations in Spring Data projects could leave web apps open to abuse

A security researcher has detailed how a “critical” bug in the Spring Data project could be abused to expose and modify web application user data. By Jessica Haworth I January 13, 2021