Andrew Terranova

At 4:00 PM ET on February 19, 2024, the authorities took action to disrupt and dismantle the LockBit ransomware-as-a-service (RaaS) infrastructure, seize funds, and arrest two individuals. The authorities placed a seizure notice on the LockBit site. Operation Cronos seized more than 11,000 domains and 34 servers.

How one API event can have multiple meanings Here’s a simple example of how identical API transactions can mean very different things depending on the context. Suppose that one of the capabilities offered to your customers through an API is the ability to retrieve a copy of their invoice. In this scenario, an authenticated API request to retrieve an invoice would not be considered out of the ordinary.

One of the underlying architectural limitations of VPN solutions is the dependence on gateway appliances that accept incoming connections, allowing user access directly to the network. When a VPN’s architectural weakness is exploitable through software vulnerabilities, as in the case of Ivanti, a threat actor could gain Layer 3 access to network resources inside the security perimeter.