TLDR: State hackers breached MITRE’s network by exploiting Ivanti zero-days in January 2024. The incident compromised an unclassified network used for research but did not affect the core enterprise network. Threat actors

TLDR: Key Points: Ransomware attacks have plateaued, but security teams are still at risk for more pain. Compromised credentials are a major root cause of attacks, with organizations neglecting good authentication practices.

Article Summary TLDR: Cybersecurity alerts, incidents, and news from April 19, 2024. Key topics include Middle East, CR4T Backdoor, Kaspersky, Deceptive Game Cheat, and more. Article Summary: In the Cyber Briefing newsletter

Alarming Decline in Cybersecurity Job Postings in the US TL;DR Cybersecurity job postings in the US decreased by 22% from 2022 to 2023 Research roles saw a 69% drop, while response roles

TLDR Akira ransomware group collected $42 million in payments from over 250 organizations in the last year. Akira is now targeting Linux servers in addition to Windows machines. The Akira ransomware group

TLDR: Richard Horne, former director of cybersecurity at Barclays, has been named the new chief executive of the National Cyber Security Centre (NCSC). He will lead the UK’s strategy on cyber resilience,

Summary of Hedgey Protocol Cyber Siege Article TLDR: Hedgey Protocol suffers a $44.7 million loss in a cyber attack on Arbitrum and Ethereum platforms. Cyvers Alerts exposes vulnerabilities and urges prompt action

TLDR: Key Points: Russian hackers targeted Texas water utilities in the Panhandle in January, causing one system to overflow. The attacks were linked to a shadowy Russian hacktivist group known as CyberArmyofRussia_Reborn.

TLDR: Central American Security Conference (CENTSEC) in Guatemala focused on utilizing innovations to protect borders in all domains. Participants included security leaders and delegations from twelve nations, discussing topics like cyber security

TLDR: The EU has revised its Cybersecurity Directive (NIS2) with new rules applying to a wide range of companies in various sectors NIS2 imposes new cybersecurity obligations and high fines for noncompliance,