Insights

This month is Women's History Month with a dedicated day of March 8th being International Women's Day. As a woman who has been appreciating the women that have come before her and honoring them each day, I don't need a set time to remember them. I think this month needs to be utilized as an opportunity to teach. I think that the young girls and women in schools need to be shown examples of women who have made major contributions in areas where just a few years ago there was nothing. We need to empower those coming up behind with the knowledge that they can succeed in any area they choose and may one day be the first female to hold that position. We need to use this time to invest, encourage, and mentor. It's our chance to make sure that 30 years from now there are no specific gender…

"Microsoft Corp. today released software updates to plug four security holes that attackers have been using to plunder email communications at companies that use its Exchange Server products. The company says all four flaws are being actively exploited as part of a complex attack chain deployed by a previously unidentified Chinese cyber espionage group." - Krebs This vulnerability is remotely exploitable and does not require authentication of any kind, nor does it require any special knowledge or access to a target environment. The attacker only needs to know the server running Exchange and the account from which they want to extract e-mail. "Hafnium primarily targets entities in the United States across a number of industry sectors, including infectious disease researchers, law firms, higher education institutions, defense contractors, policy think tanks, and NGOs," Microsoft said. "HAFNIUM has previously compromised victims by exploiting vulnerabilities in internet-facing servers. Once they've gained access to…

The healthcare industry has been bombarded with concurrent cyber threats over the last 12 months as they are on the front lines of the COVID response. Caregivers have faced many challenges during this period, including workforce shortages, overcrowded facilities, and the lack of personal protective equipment (PPE) to name a few. Ransomware however, poses the greatest cyber security threat facing the healthcare industry and caused several directly related deaths during this pandemic. In a report released by the CTI League earlier today, many points of interest have been covered in detail. In this article, we'll cover some of the key insights and you can read the full report below. What is the CTI League? The CTI League is a collective of cyber security professionals who work together with law enforcement organizations to identify and collect CTI (Cyber Threat Intelligence) to prevent ransomware from gaining access. Within the CTI League, there's…