Kevin Poireault

5 days ago | infosecurity-magazine.com | Kevin Poireault

In the face of growing geopolitical instability, critical infrastructure organizations face an unprecedented level of cyber threats, putting their operations, data and very existence at risk. Water utilities are prime targets, as our daily lives and activities are heavily reliant on water supplies and wastewater processes. The consequences of a breach could be catastrophic, disrupting essential services and potentially impacting public health.

5 days ago | infosecurity-magazine.com | Kevin Poireault

An infostealer strain known as ‘Acreed’ could become the new market leader in credential theft malware, according to ReliaQuest. The cybersecurity company’s threat research team investigated Russian Market, one of the most popular platforms for selling and buying stolen credentials on the dark web. Its report, published on June 2, showed that Lumma Stealer, also known as LummaC2, accounted for nearly 92% of Russian Market credential log alerts in the last quarter of 2024.

1 week ago | infosecurity-magazine.com | Kevin Poireault

The US banking industry is lobbying to rescind one of the US Securities and Exchange Commission’s (SEC) latest rules on cyber incident reporting. The group includes the American Bankers Association (ABA), the Bank Policy Institute (BPI), the Securities Industry and Financial Markets Association (SIFMA), the Independent Community Bankers of America (ICBA) and the Institute of International Bankers (IIB).

1 week ago | infosecurity-magazine.com | Kevin Poireault

In a new report, application security provider OX urged the US Cybersecurity and Infrastructure Security Agency (CISA) to add more context to its Known Exploited Vulnerabilities (KEV) catalog. After analyzing 10 common vulnerabilities (CVEs) in CISA’s KEV list across over 200 cloud environments, the OX researchers found that none posed any actual risks to cloud containerized environments.

1 week ago | infosecurity-magazine.com | Kevin Poireault

ConnectWise, the developer of remote access and support software ScreenConnect, has confirmed it was targeted by a cyber-attack from a nation-state threat actor. In a message sent to Infosecurity, a ConnectWise spokesperson said, “We recently learned of suspicious activity within our environment that we believe was tied to a sophisticated nation-state actor, which affected a very small number of ScreenConnect customers.”The firm did not provide any details on the intrusion.