Tag: cyber
-
Russia-linked APT29 group used red team tools in rogue RDP attacks
Russia-linked APT29 group uses malicious RDP configuration files, adapting red teaming methods for cyberattacks to compromise systems. In October 2024, the Russia-linked cyber espionage group APT29 (aka Earth Koshchei, SVR group, Cozy Bear, Nobelium, BlueBravo, Midnight Blizzard, and The Dukes) used rogue RDP attacks via phishing emails targeting governments, think tanks, and Ukrainian entities to steal data and install malware. The…
-
Free Trial of aiSIEM-CGuard for 45 Days: Experience the Future of Cybersecurity
In today’s ever-evolving digital landscape, businesses face increasingly sophisticated cyber threats. Protecting sensitive data, ensuring compliance, and maintaining operational continuity have never been more critical. This is where Seceon’s aiSIEM-CGuard emerges as a game-changer, offering advanced threat detection and response capabilities. And now, for a limited time, you can experience the full power of this…
-
Ground Rule of Cyber Hygiene: Keep Your Password Policy Up to Date
Since the earliest incidents of computer break-ins, experts have maintained that making the internet a safe place is going to be an uphill battle. Their reasons, while largely technical, also encompass human complacency. Research shows that most organizations and users fail to follow the simple practices that make computing safe. In 2024, organizations reported a..…
-
Cyber-Angriffe auf das Online-Shopping-Erlebnis: Thales warnt vor bösartigen Bots
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/cyber-angriffe-online-shopping-erlebnis-thales-warnung-boesartigkeit-bots
-
Updated National Cyber Incident Response Plan draft unveiled
First seen on scworld.com Jump to article: www.scworld.com/brief/updated-national-cyber-incident-response-plan-draft-unveiled
-
NIS2 Penetration Testing and Compliance
Tags: attack, breach, compliance, cyber, data, finance, nis-2, penetration-testing, ransomware, threatEvery day, we hear about security threats and attacks on organisations. These threats can range from ransomware and data breaches to leakage of sensitive data. There is no denying that cyber threats have been on the rise, and many organisations have fallen victim to these attacks, leading to financial and reputational losses. Hence, it is……
-
Top 10 cyber security stories of 2024
Data breaches, data privacy and protection, and the thorny issue of open source security were all hot topics this year. Meanwhile, security companies frequently found themselves hitting the headlines, and not always for good reasons. Here are Computer Weekly’s top 10 cyber security stories of 2024 First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366617185/Top-10-cyber-security-stories-of-2024
-
The Importance of Empowering CFOs Against Cyber Threats
Working closely with CISOs, chief financial officers can become key players in protecting their organizations’ critical assets and ensuring long-term financial stability. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/empowering-cfos-against-cyber-threats
-
Pennsylvania representative pitches bill to double cyber assistance for local water systems
The proposed legislation comes amid a surge in ransomware and state-linked attacks against U.S. water utilities. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/pennsylvania-rep-bill-cyber-water/735773/
-
Watch Now: Navigating Your OT Cybersecurity Journey: From Assessment to Implementation
Learn how to develop a holistic solution that provides you and your team the power to mitigate cyber threats effectively within your OT environment. The post Watch Now: Navigating Your OT Cybersecurity Journey: From Assessment to Implementation appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/webinar-tomorrow-navigating-your-ot-cybersecurity-journey-from-assessment-to-implementation/
-
New VIPKeyLogger Via Weaponized Office Documenrs Steals Login Credentials
The VIPKeyLogger infostealer, exhibiting similarities to the Snake Keylogger, is actively circulating through phishing campaigns. Delivered as attachments disguised as archives or Microsoft 365 files, it employs malicious Microsoft Office documents to spread through command-and-control (C2) infrastructure. It targets sensitive data, including login credentials, financial information, system data, and personally identifiable information, posing a significant…
-
APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP
The Russia-linked APT29 threat actor has been observed repurposing a legitimate red teaming attack methodology as part of cyber attacks leveraging malicious Remote Desktop Protocol (RDP) configuration files.The activity, which has targeted governments and armed forces, think tanks, academic researchers, and Ukrainian entities, entails adopting a “rogue RDP” technique that was previously First seen on…
-
ONLY Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation
Across small-to-medium enterprises (SMEs) and managed service providers (MSPs), the top priority for cybersecurity leaders is to keep IT environments up and running. To guard against cyber threats and prevent data breaches, it’s vital to understand the current cybersecurity vendor landscape and continually assess the effectiveness of available solutions. Luckily, the 2024 MITRE ATT&CK First…
-
Top 10 cyber crime stories of 2024
From ransomware targeting the NHS to nation-state-backed intrusions, 2024 was another big year for cyber criminals and cyber spooks alike, but they didn’t have it all their own way as the good guys fought back First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366617143/Top-10-cyber-crime-stories-of-2024
-
INTERPOL Urges to End ‘Pig Butchering’ Replaces With >>Romance Baiting<<
INTERPOL has called for the term >>romance baiting>pig butchering,>Romance Baiting
-
New I2PRAT Malware Using encrypted peerpeer communication to Evade Detections
Cybersecurity experts are sounding the alarm over a new strain of malware dubbed >>I2PRAT,
-
Earth Koshchei Employs RDP Relay, Rogue RDP server in Server Attacks
A new cyber campaign by the advanced persistent threat (APT) group Earth Koshchei has brought rogue Remote Desktop Protocol (RDP) attacks to the forefront of cybersecurity concerns. Leveraging a combination of RDP relays, rogue RDP servers, and custom malicious configuration files, this campaign has targeted high-profile organizations, posing a serious threat to global cybersecurity. The…
-
Careto A legendary Threat Group Targets Windows By Deploy Microphone Recorder And Steal Files
Recent research has linked a series of cyberattacks to The Mask group, as one notable attack targeted a Latin American organization in 2022, where attackers compromised the organization’s MDaemon email server and exploited the WorldClient webmail component to maintain persistent access. While the initial compromise vector remains unknown, the successful exploitation of the MDaemon server…
-
RiseLoader Attack Windows By Employed A VMProtect To Drop Multiple Malware Families
RiseLoader, a new malware family discovered in October 2024, leverages a custom TCP-based binary protocol similar to RisePro for downloading and executing second-stage payloads. Despite RisePro’s development discontinuation in June 2024, RiseLoader’s emergence suggests a potential connection to the threat group behind RisePro and PrivateLoader. The malware often employs VMProtect for code obfuscation and has…
-
1-Click RCE Attack In Kerio Control UTM Allow Attackers Gain Firewall Root Access Remotely
GFI Software’s Kerio Control, a popular UTM solution, was found to be vulnerable to multiple HTTP Response Splitting vulnerabilities, which affecting versions 9.2.5 through 9.4.5, could potentially allow attackers to inject malicious code into web pages, leading to cross-site scripting (XSS) attacks and other security compromises. The vulnerabilities, tracked as CVE-2024-52875 and KIS-2024-07, highlight the…
-
Google’s New XRefer Tool To Analyze More Complex Malware Samples
XRefer, an IDA Pro plugin, enhances binary analysis with a persistent companion view by employing Gemini-powered cluster analysis to decompose binaries into functional units, providing high-level architectural overviews akin to viewing a city’s districts. Simultaneously, it offers a context-aware view that dynamically updates based on the analyst’s code location, which presents relevant artifacts from both…
-
Cybercriminals Exploit Google Calendar and Drawings in Phishing Campaigns
Attackers are ingeniously exploiting Google Calendar and Google Drawings in phishing campaigns, targeting unsuspecting individuals and organizations. Leveraging the inherent trust in Google’s widely used tools, cybercriminals are successfully deceiving users into revealing sensitive information and compromising their accounts. Google Calendar: A Trusted Tool Turned Target Google Calendar, a widely used scheduling tool with over…
-
The Mask APT is back after 10 years of silence
Kaspersky researchers linked a new wave of cyber attacks to the cyber espionage group tracked as The Mask. Kaspersky researchers linked several targeted attacks to a cyber espionage group known as The Mask. The APT group targeted an organization in Latin America in 2019 and 2022. Threat actors accessed an MDaemon email server and used…
-
Multiple SHARP Routers Vulnerabilities Let Attackers Execute Arbitrary Code
Multiple vulnerabilities have been identified in SHARP routers, potentially allowing attackers to execute arbitrary code with root privileges or compromise sensitive data. Labeled under JVN#61635834, the vulnerabilities highlight significant security concerns for affected devices. Overview and Key Vulnerabilities JPCERT/CC, alongside security expert Shuto Imai of LAC Co., Ltd., has detailed several critical vulnerabilities affecting SHARP…
-
Hackers Exploit Linux SSH Servers Using Screen hping3 Tools With >>cShell<< Bot
Tags: attack, cyber, data-breach, exploit, hacker, intelligence, linux, malware, monitoring, service, toolThe AhnLab Security Intelligence Center (ASEC) has detected a new strain of malware targeting poorly protected Linux SSH servers. This malware, named >>cShell,
-
Passwort Folge 21: Von Zug(p)ferden, Cyber-Gangstern und Passwort-Policies
Im Security-Podcast geht es um problematische Rechnungsformate, Darknet-Marktplätze, behördliches Vorgehen gegen deren Betreiber und einiges mehr. First seen on heise.de Jump to article: www.heise.de/news/Passwort-Folge-21-Von-Zug-p-ferden-Cyber-Gangstern-und-Passwort-Policies-10195829.html
-
SANS Cyber Leaders Podcast-Reihe bietet strategische Tools für CISOs
Im Gegensatz zu anderen Branchen-Podcasts konzentriert sich der Cyber Leaders Podcast darauf, den Zuhörern Einblicke in die Führungsebene zu geben, die ihnen helfen, den Zusammenhang zwischen Cybersicherheit und geschäftlicher Widerstandsfähigkeit herzustellen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/sans-cyber-leaders-podcast-reihe-bietet-strategische-tools-fuer-cisos/a39312/