Guidance
-
Blog
Five Eyes cyber agencies issue guidance on edge device vulnerabilities
A host of cybersecurity agencies have teamed up to offer guidance on how to secure edge devices from ever-increasing threats. The advice covers network edge devices and appliances, such as firewalls, routers, virtual private networks (VPN) gateways, Internet of Things (IoT) devices, internet-facing servers and internet-facing operational technology (OT) systems. Issued by the UK’s National Cyber Security Centre (NCSC), CISA,…
Read More » -
Blog
Cyber agencies share security guidance for network edge devices
Five Eyes cybersecurity agencies in the UK, Australia, Canada, New Zealand, and the U.S. have issued guidance urging makers of network edge devices and appliances to improve forensic visibility to help defenders detect attacks and investigate breaches. Such devices, including firewalls, routers, virtual private networks (VPN) gateways, internet-facing servers and operational technology (OT) systems, and Internet of Things (IoT) devices,…
Read More » -
Blog
FBI issues guidance for enterprises as fake North Korean IT workers wreak havoc
The FBI has issued fresh guidance aimed at helping organizations combat the threats posed by fake North Korean IT workers after a spate of incidents. In its latest efforts to stamp out the scam whereby North Korean hackers pose as legitimate remote IT workers, the FBI said they are continuing to target US-based businesses. “In recent months, in addition to…
Read More » -
Blog
CISA shares guidance for Microsoft expanded logging capabilities
CISA shared guidance for government agencies and enterprises on using expanded cloud logs in their Microsoft 365 tenants as part of their forensic and compliance investigations. As the cybersecurity agency explained, these newly introduced Microsoft Purview Audit (Standard) logging capabilities support enterprise cybersecurity operations by providing access to information on critical events such as mail sent, mail accessed, and user…
Read More » -
Blog
EU Offers Guidance on How AI Devs Can Obey Privacy Laws
The European Data Protection Board has published an opinion addressing data protection in AI models. It covers assessing AI anonymity, the legal basis for processing data, and mitigation measures for impacts on data subjects for tech companies operating in the bloc. It was published in response to a request from Ireland’s Data Protection Commission, the lead supervisory authority under the…
Read More »