January 8th, 2025 Security Briefing with IANS Faculty ⁠Jessica Hebenstreit and ⁠⁠Jake Williams⁠

This Episode Details: Treasury Gets BeyondTrusted - The Treasury Department reported that it was the victim of a compromise on its unclassified network. It reported that the source of the hack was a third party facilitating remote access into the environment, which is known to be BeyondTrust.

Browser Plugins Are a (Cyber)haven for Malware - On Christmas Eve, a Cyberhaven developer fell victim to a phish that allowed a threat actor to publish applications to Cyberhaven’s account in the Google Chrome Web Store where browser extensions are published. CDN Shutdowns and Build Pipelines - The CDN provider Edgeio is in Chapter 11 bankruptcy proceedings and is facing imminent shutdown of its CDN services. While Edgeio customers are in a mad scramble to migrate off the platform, many organizations don’t realize they’ll be impacted by this.

With ⁠IANS Research⁠, get security expertise at speed. IANS Research is a clear-headed resource for decision making and articulating risk, providing experience-based security insights for Chief Information Security Officers and their teams.

Any views or opinions presented in this document are solely those of the Faculty and do not necessarily represent the views and opinions of IANS. Although reasonable efforts will be made to ensure the completeness and accuracy of the information contained in our written reports, no liability can be accepted by IANS or our Faculty members for the results of any actions taken by the client in connection with such information, opinions, or advice.