David Jones

5 days ago | cybersecuritydive.com | David Jones

Microsoft and CrowdStrike will lead a cooperative effort to map out the overlapping web of hacker groups that their researchers have disclosed and named, the companies said on Monday. Palo Alto Networks and Google and its Mandiant unit have also agreed to join the collaborative effort on streamlining threat group taxonomy.

5 days ago | cybersecuritydive.com | David Jones

SentinelOne said on Saturday that a global service disruption a few days earlier was the result of a software flaw in the company’s infrastructure control system that led to a widespread loss of network connectivity. In a root-cause analysis report, the company said Thursday’s major connectivity loss — which crippled its services worldwide — was not the result of a cyberattack. Instead, critical network routes and DNS resolver rules were deleted due to a software flaw in an automated process.

1 week ago | cybersecuritydive.com | David Jones

ConnectWise is investigating suspicious activity — likely associated with a nation-state actor — affecting a limited number of customers that use ScreenConnect. In a post on its website, ConnectWise said it has notified all affected customers, alerted law enforcement to the attack and retained Mandiant to help with its investigation. A company spokesperson added that ConnectWise implemented enhanced monitoring and hardening measures across its environment.

1 week ago | cybersecuritydive.com | David Jones

SentinelOne said Thursday that an outage had affected consoles for enterprise customers across the world. The Mountain View, Calif.-based cybersecurity vendor said in a blog post that there was no reason to believe the incident was the result of a cyberattack. Customer endpoints were not affected, SentinelOne said, but the company’s managed-response services did not have visibility during the outage. The incident also delayed the company’s threat data reporting.

1 week ago | cybersecuritydive.com | David Jones

More than 9,000 ASUS routers have been compromised in a months-long hacking campaign that researchers from GreyNoise warn may be a prelude to the creation of a botnet. Hackers are breaching routers through brute-force login attempts and authentication bypasses that rely on a command injection vulnerability, tracked as CVE-2023-39780, to execute system commands, GreyNoise researchers said in a blog post on Wednesday.