\u201cRecently, we\u2019ve seen increased interest in using public key infrastructure (PKI) in DevOps and device management, particularly for IoT devices. But one of the most fundamental problems with PKI remains\u2014it\u2019s hard to set up Certificate Authorities (CA), and even harder to do it reliably at scale.\u201d<\/p>\n
Traditional digital certificates issued by a private Certificate Authority hosted on-premises have an expiration date far off into the future, which is one reason they are problematic. They are generally associated with a device or application-specific certificate enrollment process that happens infrequently. This system is excellent for an IoT device but, where emerging workloads are involved, Google says this is not as suitable. Examples are using private certificates in DevOps that protect software containers, virtual machines, microservices, and service accounts.<\/p>\n
This new service will be priced using a pay-as-you-go model once it is released for general availability; however, as of right now, Google says it is free to use.<\/p>\n
Canon Confirms Maze Ransomware Cyberattack<\/h2>\n
On July 30th, the Canon website went offline for about six days<\/a>, providing only status updates on the outage until the site was restored to operation on August 4th. According to Maze, they were able to hack the website and steal 10 TB of Canon\u2019s data, including private databases, as part of their attack on the company. When BleepingComputer contacted them, they wouldn\u2019t share any other details about the attack.<\/p>\n Maze is a human-operated ransomware<\/a> that targets enterprises. It gains access in order to compromise a network by gaining control of an administrator account and the system's Windows domain controller, whereupon it stealthily spreads laterally throughout the network. It then steals unencrypted files from servers and backups and uploads them to its own servers. After they have harvested all files possible, they spread their ransomware throughout the network to encrypt all devices.<\/p>\n According to a report from Interpol<\/a> (International Criminal Police Organization), American medium-sized businesses are the target of LockBit ransomware operators.<\/p>\n LockBit is a human-operated operation that is ransomware-as-a-service (RaaS)-based. It surfaced in September 2019, targeting enterprises as a private operation, but was subsequently observed by Microsoft aiming at healthcare and critical services.<\/p>\n The ransomware\u2019s operators use the CrackMapExec penetration-testing tool to move laterally, once inside their victim\u2019s network. Maze has recently partnered with LockBit to create an extortion cartel to exchange tactics and intelligence and share the same data-leak platform during their operations.<\/p>\n Organizations exposed to ransomware attacks are recommended to keep their software and hardware up to date. Interpol also suggests that by backing up their data using offline storage devices, they can thwart ransomware operators from accessing and encrypting them.<\/p>\n Learn about common ransomware attack scenarios and what to do if one of these attacks affects your clients:<\/p>\n Further reading<\/span> Ransomware Attack Scenarios<\/a><\/p>\n![\"CTA\"](\"https:\/\/no-cache.hubspot.com\/cta\/default\/5442029\/4a146d91-d63d-4e82-9aab-1f5f0c43f780.png\")
<\/a><\/span><\/span><\/div>\n![\"CTA\"](\"https:\/\/no-cache.hubspot.com\/cta\/default\/5442029\/dcb611f1-612b-448d-8afd-7e3fea1fccc0.png\")
<\/a><\/span><\/span>\n<\/div>\n![\"Webinar](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2020\/03\/Ransomware_-Prevent-or-Recover-1.png\")
<\/div>\n<\/div>\nInterpol Reports American SMBs Target of LockBit Ransomware<\/h2>\n
Garmin Pays WastedLocker Ransom<\/h2>\n