I felt like it was deja vu all over again (as Yogi might have said): The Virgin Islands Lottery restored services after a cyberattack without paying the demanded $1M ransom.

But was this their second cyberattack like this since early 2024? Was it the same gang? Was it same means of access? There's much we don't know yet.

https://databreaches.net/2025/06/01/after-1-million-ransom-demand-virgin-islands-lottery-restores-operations-without-paying-hackers/

SentinelOne Outage Leaves Security Teams Hanging for Six Hours – Source: securityboulevard.com https://ciso2ciso.com/sentinelone-outage-leaves-security-teams-hanging-for-six-hours-source-securityboulevard-com/ #MDR(ManagedDetectionandResponse) #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #ThreatIntelligence #CyberSecurityNews #SecurityBoulevard #IncidentResponse #NetworkSecurity #Risk&Compliance #SocialFacebook #SocialLinkedIn #CloudSecurity #Cybersecurity #serviceoutage #datasecurity

Cloudflare is an American company. So how is it doing business with Russian entities?

We were just hit with a phishing campaign pointing to a Russian URL, from a brand new Russian domain, from a Russian registrar, but content served through Cloudflare.

I may be mistaken on the totality of global sanctions against Russia, but it would seem that Cloudflare would not want to do business with these entities.

Trying to triage #security alerts is a bit like playing a game of Asteroids. You can respond more efficiently to #cybersecurity alerts if you understand and prioritize the threats—just like you'd decide which asteroids might harm your ship and which ones you could ignore in the game Asteroids!

A structured approach to triaging security incidents allows you to appropriately allocate resources during the response process, as well as communicate more effectively with everyone involved. And, centralizing all security activities helps you implement a structured, risk-based approach to triage in incident response.

Learn about the challenges and benefits of incident response alert triage, best practices for improving triage for incident response, and more, in our latest blog.

https://graylog.org/post/the-importance-of-triage-in-incident-response #incidentresponse #SIEM

We are Hiring at the Publicis Groupe. Looking for individuals with a background or interest in incident response and forensics. Come join our team!

https://careers.publicisgroupe.com/jobs/109600

Responsibilities

Lead investigation of cyber security incidents of higher severity

Analyze compromised/potentially compromised systems

Coordinate evidence/data gathering and document security incident reports

Manage, review and present written and oral reports in a pertinent, concise, and accurate manner for distribution to management

Maintain security processes such as application security, vulnerability management and incident response

Maintain current knowledge of tools and best practices in advanced persistent threats, tools, techniques, procedures of attackers, forensics, and incident response

Perform complex forensic investigations into system breaches, data leaks, and system weaknesses

Provide technical expertise to staff on security incident monitoring, triage, response, threat & vulnerability management, and security analysis

Provide strategic direction on types of Incident Management activities that will drive efficiencies across company

Someone got their panties in a wad.
#incidentresponse

Vulnerabilities in CISA KEV Are Not Equally Critical: Report – Source: www.securityweek.com https://ciso2ciso.com/vulnerabilities-in-cisa-kev-are-not-equally-critical-report-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #IncidentResponse #vulnerabilities #securityweekcom #securityweek #OxSecurity #CISAKEV #zeroday #CISA

Zscaler to Acquire MDR Specialist Red Canary https://www.securityweek.com/zscaler-to-acquire-mdr-specialist-red-canary/ #Management&Strategy #SecurityOperations #IncidentResponse #RedCanary #Zscaler #MDR #SOC

Zscaler to Acquire MDR Specialist Red Canary https://www.securityweek.com/zscaler-to-acquire-mdr-specialist-red-canary/ #Management&Strategy #SecurityOperations #IncidentResponse #RedCanary #Zscaler #MDR #SOC

Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack https://www.securityweek.com/iranian-man-pleads-guilty-to-role-in-baltimore-ransomware-attack/ #JusticeDepartment #IncidentResponse #DataBreaches #Ransomware #robbinhood #Baltimore #Iran

Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack https://www.securityweek.com/iranian-man-pleads-guilty-to-role-in-baltimore-ransomware-attack/ #JusticeDepartment #IncidentResponse #DataBreaches #Ransomware #robbinhood #Baltimore #Iran

What if we flipped the script on incident response communications?

Most IR drills ask "what could go wrong?" But what if we started asking "what could go RIGHT?"

Our latest Discernible Drills challenges subscribers to practice positive incident framing during a ransomware scenario. Instead of just damage control, participants learn to:

Transform incident communications into competitive advantages
Identify opportunities to strengthen stakeholder relationships
Reverse engineer foundational investments that enable excellent responses
Convert incident response into lasting business value

Traditional IR training focuses on minimizing impact. This drill teaches teams to maximize opportunity.

By strengthening your skills in positive framing, you don't just respond to incidents more effectively -- you can fundamentally change your role within the organization, becoming a strategic partner who helps businesses navigate challenges while identifying opportunities for growth.

Ready to practice turning your next incident into a new competitive advantage?

Most security teams ask "what could go wrong?" when planning incident response. But I've found that asking "what could go right?" fundamentally changes how we prepare -- and opens up more positive opportunities for teams in their response.

It's possible to thrive through an incident, not merely survive it.

#IncidentResponse #SecurityComms

https://discernibleinc.com/blog/what-could-go-right

Understanding the Importance of Incident Response Plans for Nonprofits – Source: securityboulevard.com https://ciso2ciso.com/understanding-the-importance-of-incident-response-plans-for-nonprofits-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #incidentresponseplans #CyberSecurityNews #SecurityBoulevard #IncidentResponse #SocialFacebook #SocialLinkedIn #Cybersecurity #Nonprofits #SocialX

The 7 unwritten rules of leading through crisis – Source: www.csoonline.com https://ciso2ciso.com/the-7-unwritten-rules-of-leading-through-crisis-source-www-csoonline-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #IncidentResponse #riskmanagement #ITLeadership #CSOonline #CSOOnline

[May-26-2025] Daily Cybersecurity Threat Report
#CyberSecurity #ThreatIntel #Ransomware #DDoS #Hacktivism #DataBreach #CyberThreats #InfoSec #CyberRisk #DarkWeb #IncidentResponse #CISO #CyberReport #APT #Malware #Phishing #ZeroDay #CyberDefense #Threat #Breaches #Data #Infrastructure #Hacktivist #Cybercriminal #Disruption #Vulnerabilities #Security #MFA #Detection #Response #EDR #Darkweb #AI #Fraud #Privacy #Exploits #Digital #Theft #Ecosystem
More Information at: https://thedailytechfeed.com/may-26-2025-daily-cybersecurity-threat-report/

The 7 unwritten rules of leading through crisis https://www.csoonline.com/article/3992768/the-7-unwritten-rules-of-leading-through-crisis.html #IncidentResponse #RiskManagement #ITLeadership

X (formerly Twitter) is recovering after a global outage this morning — following a data center fire in Oregon earlier this week.

NetBlocks confirmed the disruption wasn’t due to country-level filtering, and Downdetector showed tens of thousands of reports dropping back down by midday.

While most users are back online, degraded performance remains, especially for login systems like OAuth. This highlights how vulnerable SaaS platforms and social networks are when physical infrastructure — like batteries in data centers — is disrupted.

As organizations increasingly rely on cloud and SaaS, how prepared are they for sudden physical failures? Should we rethink redundancy and crisis response?

#TechNews #CloudInfrastructure #SaaS #IncidentResponse #DataCenters

https://www.theverge.com/news/674129/x-is-down-after-data-center-fire

[May-23-2025] Daily Cybersecurity Threat Report
#CyberSecurity #ThreatIntel #Ransomware #DDoS #Hacktivism #DataBreach #CyberThreats #InfoSec #CyberRisk #DarkWeb #IncidentResponse #CISO #CyberReport #APT #Malware #Phishing #ZeroDay #CyberDefense
https://thedailytechfeed.com/may-24-2025-daily-cybersecurity-threat-report/

It's a busy conference season for #Graylog! #AWSreInforce is coming up soon on June 16th through 18th in Philadelphia, PA. Grayloggers Sam Parikh, Quinn Kroll, Justine Simpson, and Rich Murphy will be there to answer all your Graylog questions.

And... Rich Murphy will share insight on how to tame your alert avalanche — on June 17th, 1:30 PM, in his presentation at the show. Learn about a battle-tested playbook for alert noise reduction!

More: https://reinforce.awsevents.com/ #TDIR #threatdetection #incidentresponse #cybersecurity