The US Cybersecurity and Infrastructure Agency (CISA) revealed that an Iranian government-backed hacking group breached the Federal Civilian Executive Branch (FCEB) in February. Using an unpatched vulnerability in a VMware Horizon server, the hackers installed XMRig crypto-mining software and compromised several hosts to ensure continued access. The breach was not detected until June, despite CISA’s previous warnings about exploiting the vulnerability. This event underscores the need for transparency and heightened security in software supply chains.
Incident response plans can lessen impact of cyber incidents: Expert – businessinsurance.com
Incident response plans are crucial for mitigating the effects of cyber incidents, according to experts. These plans enable organizations to respond effectively, reducing damage and
