A smorgasbord of knowledge and news -

View this email in your browser (IN)SECURE Newsletter January 29, 2025 A smorgasbord of knowledge and news What's new?   5,000+ SonicWall firewalls are still vulnerable to attack via a high-severity vulnerability (CVE-2024-53704) that, according to SonicWall, should be considered "at imminent risk of exploitation". Despite warnings, more than 48,000 vulnerable Fortinet Fortigate devices are still exposed to the internet and remain at high risk, according to data from the Shadowserver Foundation. The "email bombing + posing as tech support via Microsoft Teams" combination is proving fruitful for two threat actors looking to deliver ransomware to organizations, and they seem to be ramping up their efforts. The CISO's rise to the C-suite comes with more engagement with the boardroom, an audience with the CEO, and the power to make strategic decisions for the business, according to Splunk. The ongoing evolution of the CIS Critical Security Controls Cybersecurity isn't a one-time endeavor — it's an ongoing process of adaptation and improvement. Updating your organization to CIS Controls v8.1 will not only help meet the current challenges but also lay a robust foundation for future upgrades to your cybersecurity strategies. Ideas to consider, practices to implement Defense strategies to counter escalating hybrid attacks Scam Yourself attacks: How social engineering is evolving Acronis CISO on why backup strategies fail and how to make them resilient Decentralization is happening everywhere, so why are crypto wallets "walled gardens"? Addressing the intersection of cyber and physical security threats A humble proposal: The InfoSec CIA triad should be expanded How CISOs can elevate cybersecurity in boardroom discussions NDR's role in a modern cybersecurity stack (Video) Get our news via e-mail Subscribe to get regular updates from Help Net Security. Choose between our daily and weekly newsletters, or you can also opt for specialized newsletters: Breaking news – sent for major events Cybersecurity jobs – sent weekly Open-source cybersecurity tools – sent monthly Open-source cybersecurity tools you should check out BloodyAD - An Active Directory privilege escalation framework Web Cache Vulnerability Scanner - A tool for detecting web cache poisoning Stratoshark - Wireshark for the cloud Fleet - A for IT and security teams MSSqlPwner - A tool for pentesting MSSQL servers Contextal Platform - A solution for contextual threat detection and intelligence Copyright © 2025 Help Net Security (Astus d.o.o.), All rights reserved. You are receiving (IN)SECURE Newsletter because you opted in at our web site located on https://www.helpnetsecurity.com. Note: Sometimes we send promotional maildrops to our list. We never share your details with anyone! We really send a limited number of maildrops per year, so we hope you won't unsbscribe because of them. Thanks in advance! Our mailing address is: Help Net Security (Astus d.o.o.) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list.