Resources
CRITICALSTART® Expands Executive Bench by Appointing New Chief Customer Officer
Stuti Bhargava joins leadership team to continue expanding ser
GitLab Patches Bug That Could Expose CI/CD Pipeline to Supply Chain Attack
September 13, 2024 | GitLab has patched a critical vulnerability (CVE-2024-6678) with a CVSS score of 9.9, w
North Korean Hacker Group Using False Coding Tests to Spread Malware
September 16, 2024 | The notorious Lazarus Group is posing as recruiters to spread malware via fake coding a
Tapping Into Asset Visibility for Enhanced MDR Outcomes
September 16, 2024 | Asset visibility is key to improving Managed Detection and Response (MDR) outcomes.
Expert Insights on National Insider Threat Awareness Month: Why It Matters for Cybersecurity
September 17, 2024 | National Insider Threat Awareness Month highlights the need to address insider risks—w
GitLab Fixes Critical Pipeline Vulnerability
September 17, 2024 | GitLab has released security updates for 17 vulnerabilities, including a critical flaw
Zero-Click Vulnerabilities in macOS Calendar Risk iCloud Data Exposure
A series of macOS vulnerabilities in the Calendar app exposed iCloud data by bypassing security features like Gatekeeper and
Zero-Click RCE Bug in macOS Calendar Exposes iCloud Data
September 18, 2024 | A zero-click vulnerability chain in macOS allowed attackers to bypass security features like Gatekeeper
Closing the Gap Between Cyber Risk Strategy and Execution
September 18, 2024 | A recent Cyber Risk Peer Benchmarking Report from Critical Start reveals a disconnect between strategy a
Four Ways to Stay Ahead of the Ransomware Threat
September 18, 2024 | Ransomware groups like LockBit, Play, and BlackBasta are behind 40.54% of attacks in 2024.
TeamTNT Hackers Attacking VPS Servers Running CentOS
A new cryptojacking campaign by TeamTNT is targeting cloud infrastructures, specifically Docker containers and Kuber
TeamTNT Hackers Attacking VPS Servers Running CentOS
September 20, 2024 | The hacking group TeamTNT has launched a new attack campaign targeting VPS ser