A federal agency server was compromised by a suspected Iranian advanced persistent threat (APT) group via the Log4j vulnerability. The threat actors breached a VMware Horizon server, installed cryptomining software, accessed domain control, compromised credentials, and installed a reverse proxy service. The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation urged affected organizations to assume compromise and initiate threat hunting activities.

Beyond Compliance – How VPs of Security Drive Strategic Cybersecurity Initiatives
Modern VPs of Security are evolving from compliance enforcers to strategic leaders, aligning cybersecurity with business goals. They prioritize proactive risk management, adopt Zero Trust