Search Results: cisa

How to Protect Against and Recover from ESXiArgs Ransomware

CISA has released a recovery guide that includes a recovery script to help organizations recover from the ESXiArgs ransomware attacks.

February 9, 2023 Zachary Comeau Leave a Comment

To help organizations impacted by the ESXiArgs ransomware campaign that is exploiting a two-year-old vulnerability in VMware ESXi servers, the U.S Cybersecurity and Infrastructure Agency has released a recovery guide that includes a recovery script to help organizations recover their files. According to the agency, threat actors are targeting end-of-life ESXi servers or ESXi servers […]

Critical VMware Vulnerability From 2021 Leveraged in Mass Ransomware Campaign

A threat actor is reportedly leveraging a two-year-old vulnerability in VMware ESXi servers to deploy ransomware.

February 7, 2023 Zachary Comeau Leave a Comment

A two-year-old vulnerability in VMware ESXi servers is reportedly under mass-exploitation by a ransomware threat actor, and more than 1,000 VMware ESXI severs have been compromised. According to cybersecurity firm Blackberry, the new ransomware, ESXiArgs, is targeting unpatched VMware ESXi servers connected to the internet, leveraging a remote code execution bug from 2021 to cause […]

IT news, This Week in it, Microsoft, Google, Gmail, ISE 2023,

This Week in IT: Microsoft Outage, VR, Cyberattacks, iOS 16.3

A Microsoft 365 outage, the AltspaceVR shutdown, Hive ransomware takedown, legitimate RMM abuse and iOS 16.3 highlight this week's IT news.

January 26, 2023 Zachary Comeau Leave a Comment

Editor’s note: There is a lot going on in the world of IT, from emerging technologies to digital transformation and new cybersecurity threats. However, we can’t possibly cover it all, so we’ll bring you This Week in IT, a curated summary of IT and enterprise technology news stories each week. Microsoft 365 outage Multiple Microsoft 365 […]

Cybersecurity testing, penetration testing, cyber threats

This K-12 Cybersecurity Resource Offers Useful Guidance for School IT Professionals

The U.S. Cybersecurity & Infrastructure Security Agency has released a report to help keep K-12 organizations secure.

January 25, 2023 Zachary Comeau Leave a Comment

In an effort to help protect K-12 educational institutions from an increasing rate of cyberattacks, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a new report with recommendations and resource to help K-12 IT professionals address their plentiful security risks. CISA’s new report, “Protecting Our Future: Partnering to Safeguard K–12 organizations from Cybersecurity […]

FDA to Regulate Medical Device Cybersecurity

A new law requires manufacturers of medical devices to ensure that their equipment and related systems are cybersecure.

January 19, 2023 TD Staff Leave a Comment

For years now, healthcare providers have been struggling with the cybersecurity issues posed by medical devices. One study released in December found that internet-connected medical devices have a 24% greater risk for cyberattacks. However, a new federal law passed late last year offers some relief. The Food and Drug Administration (FDA) now has the authority and $5 […]

ransomware emsisoft, organization impacted by ransomware

Education, Healthcare And Government Organizations Impacted by Ransomware in 2022

An Emsisoft report found almost twice the number of K-12 schools were impacted by ransomware in 2022 compared to 2021.

January 10, 2023 TD Staff Leave a Comment

Ransomware continues to be a significant challenge for colleges and universities, school districts, and hospitals across the country, according to a new report. The 2022 report, released Monday by digital security firm Emsisoft, determined 89 education sector organizations were impacted by ransomware. Broken down, hackers demanded ransoms from 44 universities and colleges, and 45 school districts […]

Expect ‘Headline-grabbing’ Log4j Attacks in 2023

Log4j bug will continue to be a critical issue for IT professionals in 2023, according to GreyNoise.

January 4, 2023 Zachary Comeau Leave a Comment

Organizations should expect to see continued cyberattacks leveraging the Log4Shell vulnerability in 2023, cybersecurity company GreyNoise Intelligence says in a new report. The Washington, D.C.-based internet scanning traffic analysis firm’s recently released report, the 2022 Mass Exploitation Report, dives deep into the most significant threat detection events of the past year, including touching on CISA’s […]

How To Protect Your Organization from Cyberattacks Before The Holidays

IT and security pros should take extra steps to protect their organization from cyberattacks this holiday season, White House, CISA urge.

December 19, 2022 Zachary Comeau Leave a Comment

Editor’s note: This article was originally published last year, but the main points are still relevant today as we head into another holiday break. Review these tips and recommendations to keep your organization safe and secure this year. With the holidays approaching, federal officials are again warning organizations of all sizes to be on the […]

Apple Fixes Actively Exploited Bug in WebKit Impacting Wide Range of Devices

Apple has patched several security bugs, including one in WebKit that is being actively exploited and impacting all supported iPhones.

December 15, 2022 Zachary Comeau Leave a Comment

Apple this week has patched a wide range of security fixes, including one in WebKit that is being actively exploited and impacting all supported iPhones. The security update, included in iOS 16.1.2, macOS Ventura, macOS Big Sur, macOS Monterey, Apple TV, fixes a bug that would allow arbitrary code execution if maliciously crafted web content […]

This Week in IT: AWS re:Invent, Cuba Ransomware, LastPass Incident

AWS innovations, a new advisory on the Cuba ransomware group and another security incident at LastPass highlight this week's IT news.

December 1, 2022 Zachary Comeau Leave a Comment