News

Emerging Threat Alert: Drive-by-Compromise on the Rise as GootLoader Malware Exploits SEO Poisoning to Target Victims.

On June 30, 2023, the Supreme Court of the United States (SCOTUS) released its opinions on two matters (Department of Education v. Brown and Biden v. Nebraska) related to the Biden Administration’s student-loan debt-forgiveness plan (Plan).  As written and intended, the Plan was set to discharge $10,000 to $20,000 of an eligible borrower’s debt, conditional on multiple criteria, including the borrower’s annual income (with its own caveats surrounding tax filings) and the specific type of loan in the borrower’s name.

In recent months virtualized hypervisor environments such as VMware ESXi have increasingly been targeted by adversaries with the sole objective of financial gain, leveraging ransomware as a tool of choice.

Many organizations are required to conduct an annual incident response tabletop exercise to meet compliance or audit requirements, which can be a source of great consternation within various organizations. Check out Advisory Director, Tom Schwab's recent article "How to get the most out of your tabletop exercise and reduce your stress".

Decades of professional service, cyber threat intelligence, and products to reduce cyber risk for organizations of any size, anywhere.

Kivu Consulting, Inc. (Kivu), a leading provider of cybersecurity and forensic services worldwide, welcomes Justin Harvey as Vice President. The cyber-defense, incident response, and threat hunting industry veteran will lead Kivu’s Digital Forensics & Incident Response business unit focused on crisis response to cyberattacks and helping organizations quickly contain and recover.

Following a notable decline in 2022, Kivu has observed signs of increased activity in Q1 2023.  Most of these events result from threat actors targeting older, known vulnerabilities that could have been addressed. Realizing your business has been impacted by a successful ransomware attack can paralyze decision-makers causing long-term pain in the future.  Below are some things for your organization to keep in mind.

Global cybersecurity services firm broadens team in incident response, digital forensics, and ransomware negotiation

Cybersecurity Awareness - Friday Facts#BeCyberSmartCustomer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server

Microsoft recently disclosed two zero-day vulnerabilities that affect Microsoft Exchange servers 2013, 2016, and 2019 (CVE-2022-41040 and CVE-2022-41082). Currently, there is no patch for these vulnerabilities, and they have actively been exploited. The newly disclosed Exchange vulnerabilities are similar to the ProxyShell exploit, which can result in remote code execution via Powershell.

Kivu Hires Carlene Shores, Cybersecurity Industry Veteran, as Vice President of Sales Top sales executive brings decades of expertise in solving cybersecurity needs