Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Nick Rossmann
Update on Apache Log4j Zero-Day Vulnerability
IBM Security is following a recent disclosure regarding an Apache vulnerability in the Log4j Java library dubbed Log4Shell (or LogJam). X-Force Exchange has further details on the exploit. Millions of applications use the Java-based Log4j library to log activity, including several prominent web services.
Cybercriminals Are Coming for Your Data - Where You Keep it May Determine If They Succeed
Industry executives and experts share their predictions for 2022. Read them in this 14th annual VMblog.com series exclusive. By Nick Rossmann, Global Threat Intelligence Lead, IBM X-Force During the last two years, many organizations have come face to face with the shortcomings of their digital infrastructure. Some rushed to cloud not considering a measured approach to their adoption, while others hesitated to lean into the cloud advantage, digging their heels into their on-premises infrastructure.
2021 Cyber Resilient Organization Study: Rise of Ransomware Shows the Need for Zero Trust and XDR
“How many millions did you pay threat actors in a ransomware attack?” “Which investments most significantly improved cyber resiliency for your organization?” “Do you have a cybersecurity incident response plan that’s applied consistently across your enterprise?” The answers to these and other key questions produced several notable findings in the latest 2021 Cyber Resilient Organization Study.
Hackers Launch Cyberattack via U.S. Aid Agency Email Accounts
Microsoft announced a Russian threat group (ITG05, aka Nobellium, APT28) also thought to be behind the SolarWinds attack conducted an email campaign masquerading as the U.S. Agency for International Development. Microsoft reports that while organizations in the United States received the largest share of attacks, targeted victims span at least 24 countries. The earlier campaign in April and May of this year targeted human rights groups and governmental agencies.
Defending the COVID-19 Vaccine Supply Chain
We must treat this supply chain like a piece of our nation's critical infrastructure, just like the electrical grid or air traffic control system. I've sat in front of computer screens for over 15 years in the intelligence community and private sector, facing off against foreign adversaries that I'll never get to look in the eye. But one thing I know to be true of an adversary is that no opportunity is missed — nor is any crisis off-limits.
Update on Widespread Supply-Chain Compromise
SolarWinds has announced a cyberattack on its systems that compromised specific versions of the SolarWinds Orion Platform, a widely used network management tool. SolarWinds reports that this incident was likely the result of a highly sophisticated, targeted and manual supply chain attack by a nation state, but it has not, to date, independently verified the origin of the attack. Subsequently, a number of U.S. federal agencies have disclosed they were potentially victims of the hacking campaign.
A Reminder to Stay Vigilant
This year has been a challenging one for organizations that faced data breaches, intrusions and ransomware attacks at the hands of cyber criminals and nation-state attackers. Cybersecurity firm FireEye announced on Dec. 8, 2020, that an adversary targeted and gained unauthorized access to its Red Team tools — an important call to every company to remain vigilant and be prepared for a potential incident.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Nick
Contact Nick, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack