Displaying items by tag: Cybersecurity and Infrastructure Security Agency

Microsoft has no plans to clarify issues about the breach of its Azure cloud environment, which are still hazy, the company says.

US Senator Ron Wyden has asked the Federal Trade Commission, the Department of Justice and the Cybersecurity and Infrastructure Security Agency to hold Microsoft responsible for its "negligent cyber-security practices, which enabled a successful Chinese espionage campaign against the US Government".

The email account of US Commerce Secretary Gina Raimondo was among a slew of accounts breached at both the State and Commerce Departments by attackers, claimed to be from China, who gained access through a vulnerability in Microsoft's Azure cloud platform.

COMPANY NEWS: Interos, the fast-growing operational resilience company, and Mandiant today announced a strategic partnership to provide advanced insights and analysis to help enterprises defend against cyber attacks and other threats to their operational resilience. The collaborative partnership is designed to bring to market new intelligence based on insights gleaned from the Interos Resilience Lab, as well as Interos’ SaaS platform, and the frontline investigations and remediations Mandiant conducts regarding high impact cyber attacks worldwide.

Nine vulnerabilities in Microsoft products were among the top 15 routinely exploited flaws in 2021 listed by government security agencies in the Five Eyes countries.

Steps to mitigate attacks against industrial control systems, outlined by three US Government entities — the Cybersecurity and Infrastructure Security Agency, the FBI and the Department of Energy — have come in for some sharp criticism from Robert M. Lee, the chief executive of Dragos, a company that specialises in security for such systems.

A seasoned security professional has slammed Microsoft for the company's decision to remove CVE description information from the monthly listing of patches on the second Tuesday of each month, saying that the new method will give malicious attackers the advantage to reverse engineer patches.