Operations | Monitoring | ITSM | DevOps | Cloud

A few weeks ago, CDK Global, a software provider with 15,000 North American car dealership customers, faced back-to-back cyberattacks, effectively taking down scheduling, records, and more for their thousands of customers for days. The CDK Global attack is also the latest cyber incident to spur larger industry-wide conversations around the supply chain risks posed by increasingly ruthless and aggressive bad actors.

Remote Code Execution (RCE) is when an attacker runs malicious code on your IT infrastructure. The purpose of RCE ranges from further infiltrating your network, stealing information, or otherwise damaging, extorting, or stealing from you or your business. Because of this, protecting your computers and network from RCE attacks is vital. This article explains what remote code execution is, and the impacts of RCE on your business.

In today’s rapidly evolving cyberthreat landscape, organizations require network detection solutions that help identify and mitigate threats before significant damage happens. Among the options available on the Network Detection and Response (NDR) market, Progress Flowmon Anomaly Detection System (ADS) stands out for its unparalleled ability to detect threats throughout every stage of an attack.

Gaining insights into DCSync attacks is key to fortifying your Active Directory (AD) against these sophisticated threats. By exploiting legitimate AD replication protocols, attackers can discreetly extract sensitive information, such as password hashes and Kerberos tickets. Recognizing these attack vectors enables you to implement more effective monitoring and auditing tools, enhancing your overall security posture.

A while back, we covered how to check your Windows IIS and Loggly logs to view the source of a DDoS attack, but how do you know when your network is under attack? It is not efficient to have humans monitor logs every day and every hour, so you must rely on automated resources. Automated DDoS monitoring gives your security team more bandwidth to focus on other important tasks and still get notifications should anomalies happen due to a DDoS event.

As you integrate artificial intelligence (AI) and machine learning (ML) technologies into your business operations, you’ll notice the sophistication of cyber threats against these systems rising. Among these emerging threats, data poisoning stands out due to its potential to manipulate and undermine the integrity of your AI-driven systems. Understanding and mitigating data poisoning risks will help you maintain the security and reliability of your AI and ML applications.

Credential theft has long been a leading cause of network security breaches, leading many organizations to implement multi-factor authentication (MFA) as a safeguard. It’s highly recommended that you enable MFA for all accounts as a best practice. However, the effectiveness of MFA depends significantly on how it’s set up because attackers are developing strategies to bypass it.