被害状況

攻撃者

脆弱性

脆弱性

脆弱性

脆弱性

1. Email security is still relying on outdated methods like antivirus, despite other systems being up-to-date with security measures.
2. Email security needs to shift its focus from blocking threats to detecting, containing, and mitigating potential damages caused by attackers.
3. Email security solutions need to evolve to address modern threats such as payload-less BEC, weaponized links, and account takeovers without malware.
4. An endpoint detection and response (EDR)-like approach is necessary for email security, providing continuous visibility and automated response capabilities.
5. Utilizing APIs like Microsoft Graph and Google's Workspace APIs allows for enhanced telemetry, control, and automated response capabilities in email security.

1. サイバーセキュリティニュースプラットフォーム
2. Scattered SpiderがVMware ESXiを乗っ取り、米国の重要インフラにランサムウェアを展開
3. Scattered SpiderがVMware ESXi hypervisorsを標的にし、北米の小売業、航空業、および輸送業で攻撃
4. 攻撃チェーンは、5つの異なるフェーズを経て展開される
5. 組織は、3層の保護を実装することが推奨されている

脆弱性

脆弱性

被害状況

攻撃者