Devon Warren-Kachelein

Former Staff Writer, ISMG

Warren-Kachelein began her information security journey as a multimedia journalist for SecureWorld, a Portland, Oregon-based cybersecurity events and media group. There she covered topics ranging from government policy to nation-states, as well as topics related to diversity and security awareness. She began her career reporting news for a Southern California-based paper called The Log and also contributed to tech media company Digital Trends.

Russia-Ukraine Updates: Cybersecurity News Amid Conflict

Dan Gunderman , Devon Warren-Kachelein • March 28, 2022

Cyber experts recommend security teams stay on high alert in protecting enterprise networks as Russia launches cyberattacks against Ukraine, atop its ground invasion. This thread serves as a comprehensive security-related news thread for the Russia-Ukraine conflict.

SecurityScorecard and LIFARS CEOs Discuss New Merger

Devon Warren-Kachelein • February 16, 2022

SecurityScorecard provides analysis of organizational cyber hygiene through a rating system, while LIFARS, a digital forensics firm, has offered witness testimony for major federal cybercrime cases involving nation-state threat actors. CEOs for both firms tell ISMG why their merger is significant.

M&A Roundup: Delinea Debuts, Forescout & Check Point Expand

Devon Warren-Kachelein • February 4, 2022

ThycoticCentrify renames itself Delinea to grow as a "seamless" security solution. Other acquisitions focus on providing tools to developers to better secure applications and software, boost healthcare device security, fight against chargeback fraud and bring smaller organizations into compliance.

UK-Based KP Snacks Hit by Ransomware in 'Snack Attack'

Devon Warren-Kachelein • February 3, 2022

A popular British supplier of crisps revealed in a letter to grocery wholesaler Nisa on Wednesday that it had been the victim of a cyberattack. KP Snacks has stopped its orders, causing stores to worry that its products will be in short supply. Ransomware group Conti is allegedly behind the attack.

Log4j Updates: Flaw Challenges Global Security Leaders

Devon Warren-Kachelein • February 2, 2022

The security world continues its fight against potential widespread exploitation of the critical remote code execution vulnerability - tracked as CVE-2021-44229 - in Apache's Log4j software library, versions 2.0-beta9 to 2.14.1, known as "Log4Shell" and "Logjam." This is a digest of ISMG's updates.

Log4j Exploitations Have Slowed, But Attack Vectors Remain

Devon Warren-Kachelein • January 28, 2022

Attack scans and attempts related to the Log4j flaw may have declined, but some security experts believe the attack vectors will continue to pose a problem up to two years. Also, the Ukraine Computer Emergency Response Team reports Log4j could be a possible attack vector in recent cyberattacks.

European Authorities Seize VPN Service Tied to Ransomware

Devon Warren-Kachelein • January 19, 2022

VPN Lab, known for its alleged wide use by ransomware threat actors, has been shut down. Fifteen servers associated with VPNLab.net were seized or disrupted based on multiple international investigations tying the VPN service provider to cybercrime operations, according to Europol.

US Warns of Russia-Backed Threat to Critical Infrastructure

Devon Warren-Kachelein • January 11, 2022

The U.S. Cybersecurity and Infrastructure Security Agency, FBI and National Security Agency warn in a joint advisory that state-sponsored Russian attackers are actively exploiting and seeking to cause disruption to critical infrastructure, and it urges defenders to mitigate commonly seen attack vectors.

Researchers Discover H2 Database Flaw Similar to Log4Shell

Devon Warren-Kachelein • January 7, 2022

The JFrog research team discovered a new RCE vulnerability, which will be tracked by NIST as CVE-2021-42392, in the H2 database console. Although the researchers say the root cause of this critical flaw is similar to the flaw in Apache's Log4j, they believe the differences may lessen its impact.

New Mexico County Hit by Suspected Ransomware Attack

Devon Warren-Kachelein • January 6, 2022

Bernalillo County, the largest county in New Mexico, shut down its IT systems after reportedly suffering a ransomware attack on Wednesday. County officials say they are working with third-party vendors to remediate the incident. County staff are working remotely as systems are restored.

ISMG's Greatest Hits: Top Cybersecurity Stories of 2021

Devon Warren-Kachelein • December 30, 2021

ISMG's global editorial team reflects on the top cybersecurity news and analysis from 2021 and looks ahead to the trends already shaping 2022. From ransomware to Log4j, here is a compilation of major news events, impacts and discussions with leading cybersecurity experts on what to expect in the new year.

Apache's Log4j Version 2.17.1 Addresses New Flaw

Devon Warren-Kachelein • December 28, 2021

Another Log4j patch has been released by the Apache Software Foundation, the nonprofit supporting Apache's open-source software projects. Its Log4j version 2.17.1 fixes a newly disclosed remote code execution vulnerability tracked as CVE-2021-44832.

Log4j: Belgian Defense Ministry Reports It Was 'Paralyzed'

Dan Gunderman , Devon Warren-Kachelein • December 21, 2021

The Belgian Ministry of Defense, which is responsible for national defense and the Belgian military, announced on Monday that it has fallen victim to a cyberattack officials say relates to the widespread Apache Log4j vulnerability. The attack "paralyzed the ministry's activities for several days."

White House Policy Gives Agencies 24 Hours to Report Attacks

Devon Warren-Kachelein • December 15, 2021

The White House is requiring federal agencies, including CISA and the FBI, to report cyber incidents that pose a significant threat to national security to White House advisers within 24 hours. Some security experts are questioning the merits of this new mandate.