Kroll Appoints Katherine Keefe to Lead Global Cyber Insurance Industry Capabilities: ms.spr.ly/6045mhuWT Katherine's deep understanding of the cyber insurance and regulatory landscape is invaluable as Kroll continues to expand its support for insurance clients.

What is posing the most significant risk to the integrity and confidentiality of your #software systems? Secret Leaks. Find out more on what Secret Leaks are, the security risk they pose and how to deal with them in Kroll's latest blog: ms.spr.ly/6013mKj0L

Our cyber risk experts in the offensive security team have been testing AI infrastructure! They’ve found vulnerabilities in AI systems with leading #GenAI providers and discovered that prompt injection is rife. Find out more in our exclusive briefing: ms.spr.ly/6012m8G9e

📰 Dan Rice joins Kroll to expand AI capabilities and support clients grappling with AI data governance, compliance and risk! Read more on Kroll's AI Risk Consulting Services: ms.spr.ly/6013l4PAx

The recent CrowdStrike incident sent shockwaves across the world, giving us a glimpse into the systemic cyber risk faced by businesses today. Tiernan Connolly discusses this systemic risk in the context of upcoming regulatory changes with DORA and NIS2: ms.spr.ly/6010lYhX0

Our offensive security team has been working closely with the maintainers of the TorchServe project and AWS to correct two vulnerabilities that could compromise AI infrastructure. Read more in the blog: ms.spr.ly/6016ljPN8 #AISecurity #AIIntegrity #AIVulnerability

Dave Burg, Kroll's Global Head of Cyber Risk, speaks on the recent #CrowdStrike global technology outage and implications for businesses with Sonali Basak and Scarlet Fu via @BloombergTV: ms.spr.ly/6014lpvtG #globaltechoutage

We're thrilled to be recognized by the OWASP on its Software Assurance Maturity Model (SAMM) practitioners list. This inclusion highlights our commitment to continue improving the software security posture of our client organizations: ms.spr.ly/6012lzvv8

Catch our exclusive briefing on the State of Cyber Defense: Manufacturing Cyber Resilience, where Kroll experts will share insights and analysis on the specific security challenges facing the manufacturing sector: ms.spr.ly/6014lJaMG

Our threat intel team looks into CLEARFAKE, the malicious in-browser JavaScript framework deployed on compromised webpages to deliver information stealers. Read more here: ms.spr.ly/6018lK2aG

Kroll and VotingWorks partnered in penetration testing its flagship tool, Arlo. Read more here: ms.spr.ly/6019lBSYf #electionsecurity

Are you prepared for the Digital Operational Resilience Act (DORA)? The deadline for this new regulation is January 17th. Learn more about the core aspects of the regulation, key recommendations and steps to take now: ms.spr.ly/6013lDtQR

Citrix Bleed (CVE-2023-4966) highlighted a buffer overflow in Citrix NetScaler ADC and Gateway, a flaw that could leak sensitive info and allow session "hijacking". Read what we've found on our deep dive with one of the users, the PLAY Ransomware Group: ms.spr.ly/6016lH4mp

Our threat intelligence team recently discovered a campaign with a complex infection chain to deliver IDATLOADER. It included some novel tricks for obfuscation, including HTA files and BPL side-loading. Read more on our findings: ms.spr.ly/6016YCrJq #threatintel

As Microsoft solutions constantly evolve, monitoring various configurations and settings is challenging and mistakes can lead to exposure. We’ve brought together a set of practical assessments to protect your organization and its Microsoft investments: ms.spr.ly/6017YfFcc

Each week our cyber threat intelligence team reports on the latest trends they observe from the trenches. Watch the full briefing here: ms.spr.ly/6017YA5pN

Businesses are increasingly recognizing the advantages of adopting a more flexible, scalable approach to #cybersecurity through Security as a Service (SECaaS). Check out our latest blog for more info on the #SECaaS model: ms.spr.ly/6015Yf0Il

Purple teaming can play a vital role in helping organizations defend against #cyberthreats by maximizing the impact of red and blue teams through continuous collaboration. Learn more about how it could benefit your business here: ms.spr.ly/6011Y2rmb

Tiernan Connolly has joined the Kroll Cyber Risk team to lead the Security Advisory business in EMEA. Get in touch if you need support with implementing and designing forward-thinking cybersecurity programs: ms.spr.ly/6013Y2rST

In this exclusive briefing, Kroll’s Head of Threat Intelligence in EMEA, @im_geeg, will address how Kimusky weaponized the ScreenConnect vulnerability using new malware strain TODDLERSHARK. Register Now: ms.spr.ly/6011Y2Bjc