Tag: cyber
-
Proposal for Cyber Force study is watered down in final defense bill
The final National Defense Authorization Act for fiscal 2025, released on Saturday, scraps much of the language proposed earlier this year by the House and Senate to require the Pentagon to commission an independent study focused solely on creating a U.S. Cyber Force as a potential seventh military branch.]]> First seen on therecord.media Jump to…
-
From Europe to South Africa: Where Is the World on Cyber Defense?
As we wrap up 2024, two new reports suggest that Europe and leading African nations share many of the same cyber threats and potential cybersecurity solutions as their U.S. counterparts. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/from-europe-to-south-africa-where-is-the-world-on-cyber-defense/
-
BlueAlpha Exploits Cloudflare Tunnels for GammaDrop Malware Infrastructure
The Insikt Group has uncovered a sophisticated cyber-espionage operation conducted by BlueAlpha, a state-sponsored threat actor with links to the Russian Federal Security Service (FSB). The campaign targets Ukrainian entities... First seen on securityonline.info Jump to article: securityonline.info/bluealpha-exploits-cloudflare-tunnels-for-gammadrop-malware-infrastructure/
-
8Base ransomware group hacked Croatia’s Port of Rijeka
The 8Base ransomware group attacked Croatia’s Port of Rijeka, stealing sensitive data, including contracts and accounting info. A cyber attack hit the Port of Rijeka in Croatia, the 8Base ransomware group claimed responsibility for the security breach. The Port of Rijeka (Luka Rijeka d.d.), Croatia’s largest dry cargo concessionaire, provides maritime traffic services, port operations,…
-
DaMAgeCard Attack New SD Card Attack Lets Hackers Directly Access System Memory
Security researchers have identified a significant vulnerability dubbed >>DaMAgeCard Attack
-
Security Update: Darktrace Sees Jump in Black Friday, Cyber Monday Phishing Scams
First seen on scworld.com Jump to article: www.scworld.com/news/security-update-darktrace-sees-jump-in-black-friday-cyber-monday-phishing-scams
-
Deloitte Denies Breach, Claims Only Single System Affected
Ransomware group Brain Cipher claimed to have breached Deloitte UK and threatened to publish the data it had stolen earlier this week. However, despite the claims, a Deloitte spokesperson said that its investigation indicates that the allegations relate to a single client’s system outside the Deloitte network. “No Deloitte systems have been impacted,” the spokesperson…
-
Earth Minotaur: MOONSHINE Exploit Kit and DarkNimbus Backdoor Threaten Multi-Platform Security
A sophisticated cyber campaign orchestrated by the threat actor Earth Minotaur has been uncovered by Trend Micro researchers, exposing their reliance on the MOONSHINE exploit kit and a previously unreported... First seen on securityonline.info Jump to article: securityonline.info/earth-minotaur-moonshine-exploit-kit-and-darknimbus-backdoor-threaten-multi-platform-security/
-
TfL cyber attack cost over £30m to date
TfL provides more detail on the financial impact of the September 2024 cyber attack that crippled several of its online systems First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366616875/TfL-cyber-attack-cost-over-30m-to-date
-
Employee Data Access Behaviors Putting Australian Employers At Risk
New CyberArk research finds Australian employees choosing convenience over cyber security policies. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/cyberark-employee-risk-australia-2024/
-
Dutch Counter-Ransomware Initiative Led to Global Takedowns
Project Mellissa Contributed Toward Disruptive Actions. A Dutch public and private sector anti-ransomware initiative has contributed to ransomware disruptions globally, found an assessment from the University of Leiden. Project Melissa was launched in 2023 by Cybersafe Netherlands, the Dutch National Cyber Security Center and security companies. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/dutch-counter-ransomware-initiative-led-to-global-takedowns-a-26994
-
Channel Brief: OpenText, Secure Code Warrior Offer Cyber Training
First seen on scworld.com Jump to article: www.scworld.com/news/channel-brief-opentext-secure-code-warrior-offer-cyber-training
-
Six identity takeaways from 2024’s cyber blunders and breaches
First seen on scworld.com Jump to article: www.scworld.com/feature/top-6-identity-takeaways-from-2024s-cyber-blunders-and-breaches
-
U.K. cybersecurity chief warns of increasing cyber threats
First seen on scworld.com Jump to article: www.scworld.com/brief/u-k-cybersecurity-chief-warns-of-increasing-cyber-threats
-
5 Cyber Risk Predictions That Will Define 2025
The cyber landscape is evolving rapidly with new opportunities and threats branching off of every new technological breakthrough. From operational resilience to leadership structures, the decisions IT leaders make today Read More First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/5-cyber-risk-predictions-that-will-define-2025/
-
Protecting the C-Suite in the Wake of UHC CEO’s Murder
The torrents of public hostility directed at health insurers in the aftermath of UnitedHealthCare CEO Brian Thompson’s murder are serious signs of intensifying cyber and physical threats facing the C-suites of healthcare and many other sectors, said Chris Pierson, founder and CEO of BlackCloak. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/protecting-c-suite-in-wake-uhc-ceos-murder-i-5428
-
What is Red Teaming?
Red teaming is like staging a realistic rehearsal for a potential cyber attack to check an organization’s security resilience before they become actual problems. The exercise has three key phases: getting inside the system, maintaining their presence undetected, and acting to achieve their goals. The job is to test an organization’s defenses, challenge security assumptions,……
-
FCC Proposes Stricter Cybersecurity Rules for US Telecoms
The Salt Typhoon hack against US telecommunications firms has prompted the FCC to suggest stricter security rules to protect the sector from future cyber threats First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fcc-cybersecurity-rules-for-us/
-
Top Five Industries Most Frequently Targeted by Phishing Attacks
Researchers analyzed phishing attacks from Q3 2023 to Q3 2024 and identified the top five industries targeted by subject-customized emails, which often leverage personal information like names, emails, phone numbers, or company names to bypass security measures. Employing redaction techniques to protect sensitive information while providing actionable intelligence to clients ensures that valuable insights are…
-
Sophisticated Celestial Stealer Targets Browsers to Steal Login Credentials
Researchers discovered Celestial Stealer, a JavaScript-based MaaS infostealer targeting Windows systems that, evading detection with obfuscation and anti-analysis techniques, steals data from various browsers, applications, and cryptocurrency wallets. It operates as an Electron or NodeJS application, injecting code into vulnerable apps and communicating with C2 servers. The malware’s FUD status is maintained through regular updates…
-
Cybersecurity in the European Union 2024: ENISA’s Insights and Recommendations for Strengthening Resilience
A new report from the European Union Agency for Cybersecurity (ENISA) offers critical insights into the state of European Union cybersecurity, including recommendations to reinforce the EU’s resilience against evolving cyber risks. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/enisa-report-on-european-union-cybersecurity/
-
News alert: One Identity wins 2024 Cyber Defense Award: Hot Company PAM category
Alisa Viejo, Calif., Dec. 5, 2024, CyberNewswire, One Identity proudly announces it has been named a winner in the Hot Company: Privileged Access Management (PAM) category in the 12th annual Cyber Defense Awards by Cyber Defense Magazine (CDM), the… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/news-alert-one-identity-wins-2024-cyber-defense-award-hot-company-pam-category/
-
Russian BlueAlpha APT Exploits Cloudflare Tunnels to Distribute Custom Malware
BlueAlpha, a Russian state-sponsored group, is actively targeting Ukrainian individuals and organizations by using spearphishing emails with malicious HTML attachments to deliver GammaLoad malware. To evade detection, BlueAlpha is leveraging Cloudflare Tunnels to conceal their infrastructure and using DNS fast-fluxing for their C2 servers, as this ongoing campaign, active since early 2024, highlights the persistent…
-
Russian Hackers Hijacked Pakistani Actor Servers For C2 Communication
Secret Blizzard, a Russian threat actor, has infiltrated 33 command-and-control (C2) servers belonging to the Pakistani group Storm-0156, which allows Secret Blizzard to access networks of Afghan government entities and Pakistani operators. They have deployed their own malware, TwoDash and Statuezy, and leveraged Storm-0156’s malware, Waiscot and CrimsonRAT, to gather intelligence on targeted networks, which…
-
Banken müssen Cyber-Bedrohungslandschaft mit fortschrittlicher Sicherheitsstrategie begegnen
Tags: cyberFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/banken-muss-cyber-bedrohungslandschaft-fortschritt-sicherheitsstrategie-begegnung
-
CapibaraZero Firmware With ESP32-S3 Hardware Enables Low Cost Flipper Zero alternative
The open-source tech landscape continues to innovate, and the release of the CapibaraZero firmware marks another breakthrough. Designed for ESP32-S3-based hardware platforms, CapibaraZero provides a low-cost alternative to the highly popular”, but expensive”, Flipper Zero, a multifunctional tool for penetration testers, ethical hackers, and tech enthusiasts. With its affordable hardware requirements and flexible firmware, CapibaraZero…
-
Multiple SonicWall Vulnerabilities Let Attackers Execute Remote Code
SonicWall has issued a critical alert regarding multiple vulnerabilities in its Secure Mobile Access (SMA) 100 series SSL-VPN appliances. These vulnerabilities could allow attackers to execute remote code, bypass authentication, or compromise system integrity. SonicWall urges users to take immediate action by updating their devices to the latest firmware to mitigate these risks. These issues…