Tag: cyber
-
Chinese APTs Shift Tactics to Evade Detection and Maintain Stealth
In light of increasing global tensions and heightened scrutiny, Chinese Advanced Persistent Threat (APT) groups are adapting their strategies to avoid detection and maintain stealth in their cyber espionage operations.... First seen on securityonline.info Jump to article: securityonline.info/chinese-apts-shift-tactics-to-evade-detection-and-maintain-stealth/
-
Sync-Scheduler Malware: Unveiling a Sophisticated Espionage Attack
In a detailed report, the BlackBerry Research and Intelligence Team has revealed a highly targeted cyber espionage campaign against the Pakistan Navy, executed by a sophisticated and likely state-sponsored threat... First seen on securityonline.info Jump to article: securityonline.info/sync-scheduler-malware-unveiling-a-sophisticated-espionage-attack/
-
What is DSPT Compliance: From Toolkit to Audit (2024)
The Data Security and Protection Toolkit (DSPT), an online tool, is undergoing significant changes. From September 2024, the DSPT will now align with the National Cyber Security Centre’s Cyber Assessment Framework (CAF) to enhance cybersecurity measures across the NHS. This shift will impact many NHS organisations and require adjustments to their data security and protection……
-
FortiClient VPN Flaw Enables Undetected Brute-Force Attacks
A design flaw in the logging mechanism of Fortinet’s VPN servers has been uncovered, allowing attackers to conduct brute-force attacks without detection. This vulnerability, disclosed by cybersecurity researchers at Pentera, highlights a critical gap in Fortinet’s ability to log successful authentication attempts during brute-force attacks, leaving enterprises vulnerable to potential breaches. The issue lies in…
-
BTS #42 The China Threat
In this episode, Paul Asadoorian, Allan Alford, and Josh Corman discuss the growing threat posed by China, particularly in the context of cyber operations and geopolitical ambitions. They explore the implications of China’s strategies, the vulnerabilities in critical infrastructure, and the need for transparency and trust in digital systems. The conversation highlights the urgency of……
-
CISA Red Team Finds Alarming Critical Infrastructure Risks
Tags: cisa, cyber, defense, detection, endpoint, infrastructure, network, RedTeam, risk, vulnerabilityRed Team Finds Vulnerabilities in Critical Infrastructure Org’s Security Framework. The U.S., cyber defense agency is urging critical infrastructure operators to learn from the experience of a volunteer read teaming test and not rely too heavily on host-based endpoint detection and response solutions at the expense of network layer protections. First seen on govinfosecurity.com Jump…
-
Ransomware attacks primarily caused by poor cyber hygiene
First seen on scworld.com Jump to article: www.scworld.com/brief/ransomware-attacks-primarily-caused-by-poor-cyber-hygiene
-
GAO: HHS Needs to Be a Better Leader in Health Sector Cyber
Watchdog Agency Report Points to Unimplemented Cyber Recommendations. The U.S. Department of Health and Human Services needs to take important actions to do a better job of carrying out its duties as the lead federal agency responsible for strengthening cybersecurity in the healthcare and public health sector, said a new federal watch dog agency report.…
-
Five Cyber Agencies Sound Alarm About Active Directory Attacks: Beyond the Basics
Tags: access, attack, authentication, cloud, compliance, control, credentials, cyber, cybersecurity, data, defense, detection, exploit, framework, iam, identity, infrastructure, intelligence, least-privilege, login, mfa, microsoft, monitoring, password, risk, service, software, strategy, tactics, threat, tool, update, vulnerabilityA landmark global report emphasizes 17 attack techniques against Microsoft Active Directory and cautions organizations to step up protections. In the second of our two-part series, we take you beyond the basics to highlight three key areas to focus on. The landmark report Detecting and Mitigating Active Directory Compromises, released in September by cybersecurity agencies…
-
Let’s Build A Dashboard!
Introduction One of the most powerful things to do with data is to visualize it. Being able to see the data in various contexts can help executives and security professionals alike understand their cyber environment better and identify their strengths and weaknesses. Dashboards in Splunk are fairly easy to make but sometimes you may […]…
-
CISA says BianLian ransomware now focuses only on data theft
Tags: advisory, cisa, cyber, cybersecurity, data, extortion, group, infrastructure, ransomware, tactics, theftThe BianLian ransomware operation has shifted its tactics, becoming primarily a data theft extortion group, according to an updated advisory from the U.S. Cybersecurity & Infrastructure Security Agency, the FBI, and the Australian Cyber Security Centre. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-says-bianlian-ransomware-now-focuses-only-on-data-theft/
-
Potential Trump cyber picks coalesce, but insiders say there could be surprises
Tags: cyberFirst seen on therecord.media Jump to article: therecord.media/potential-trump-cyber-picks-calesce-insiders-expect-surprises
-
Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor
The China-aligned advanced persistent threat (APT) actor known as Gelsemium has been observed using a new Linux backdoor dubbed WolfsBane as part of cyber attacks likely targeting East and Southeast Asia.That’s according to findings from cybersecurity firm ESET based on multiple Linux samples uploaded to the VirusTotal platform from Taiwan, the Philippines, and Singapore in…
-
Linux Malware WolfsBane and FireWood Linked to Gelsemium APT
New Linux malware WolfsBane and FireWood have been linked to Gelsemium APT, a cyber-espionage group targeting critical systems First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/linux-malware-wolfsbane-firewood/
-
Identity Security: What Next?
Identity Security is a topic we have tracked and discussed on numerous occasions at The Cyber Hut over the past 12 months. As the role of identity and access management has changed fundamentally over the past 5 years expanding into customers, citizens, non-humans and machines IAM has become a prize-winning target for adversarial… First seen…
-
Dozens of Central Asian targets hit in recent Russia-linked cyber-espionage campaign
First seen on therecord.media Jump to article: therecord.media/central-asia-cyber-espionage-tag-110-russia
-
A timeline of cyber-resilience: fortifying critical national infrastructure
By Peter Lenk, Tech Lead at Goldilock Critical national infrastructure (CNI) faces a mounting threat landscape, necessitating a fundamental overhaul of security strategies. Consider last summer’s attack on London hospitals, where just one cyber incident resulted in the postponement of 1,255 planned operations and 3,396 appointments. Incidents like this are unfortunately no longer exceptional. Following…
-
Cyber Threats in Australia: Insights from the Annual Cyber Threat Report 2023-2024
The Annual Cyber Threat Report 2023-2024 has shared crucial insights into the current state of cybersecurity in Australia, detailing the ongoing risks and challenges faced by businesses, individuals, and critical sectors. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/annual-cyber-threat-report-2023-2024/
-
QuantumSoftware kombiniert KI-Engines, Post-Quantum-Verschlüsselung und DevOps-Optimierung
Die neue Check-Point-Quantum-Firewall-Software R82 kombiniert KI-Engines, Post-Quantum-Verschlüsselung und DevOps-Optimierungen für skalierbare und vereinfachte Rechenzentrumsoperationen. Check Point präsentiert damit eine KI-basierte Netzwerksicherheitslösung der nächsten Generation. Bei einem globalen Anstieg der Cyber-Angriffe um 75 Prozent bietet R82 KI-gestützte Engines, die Schutz vor Zero-Day-Bedrohungen, sowie Phishing, Malware und DNS-Exploits (Domain Name System) gewährleisten. Darüber hinaus enthält sie neue…
-
Cyber Story Time: The Boy Who Cried “Secure!”
As a relatively new security category, many security operators and executives I’ve met have asked us “What are these Automated Security Validation (ASV) tools?” We’ve covered that pretty extensively in the past, so today, instead of covering the “What is ASV?” I wanted to address the “Why ASV?” question. In this article, we’ll cover some…
-
Researchers Detailed FrostyGoop Malware Attacking ICS Devices
FrostyGoop, a newly discovered OT-centric malware that exploited Modbus TCP to disrupt critical infrastructure in Ukraine, capable of both internal and external attacks, targets industrial control systems (ICS) devices. By sending malicious Modbus commands, FrostyGoop can cause physical damage to the environment, as analysis has uncovered additional samples, configuration files, and network communication patterns associated…
-
Logpoint ernennt Dave Schneider zum VP Marketing zur Beschleunigung des Wachstums
Logpoint bietet eine europäische Cyber Defense Platform, die SIEM mit Automatisierungs- und Case Management-Technologien integriert, um die Fähigkeiten zur Erkennung, Untersuchung und Reaktion auf Bedrohungen zu verbessern. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/logpoint-ernennt-dave-schneider-zum-vp-marketing-zur-beschleunigung-des-wachstums/a39007/
-
Ukrainian cyberwar experience becomes blueprint for TRYZUB cyber training service
The Computer Emergency Response Team of Ukraine (CERT-UA), part of the State Service of Special Communications and Information Protection (SSSCIP), has joined forces with the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/21/ukrainian-cyberwar-tryzub-cyber-training-service/
-
5 Hackers Charged for Attacking Companies via Phishing Text Messages
Federal authorities have unsealed charges against five individuals accused of orchestrating sophisticated phishing schemes that targeted employees of companies across the United States. The alleged hackers reportedly stole confidential company data and millions of dollars in cryptocurrency by exploiting stolen employee credentials. The defendants, ranging in age from 20 to 25, are accused of conspiracy…
-
Hiscox Cyber Readiness Report 2024 – Cyberresilienz muss fokussiert werden
Tags: cyberFirst seen on security-insider.de Jump to article: www.security-insider.de/cyberangriffe-auswirkungen-cyberresilienz-a-fa3924ddc3321ad3baf5c7fb6580de51/
-
Two PyPi Malicious Package Mimic ChatGPT Claude Steals Developers Data
Two malicious Python packages masquerading as tools for interacting with popular AI models ChatGPT and Claude were recently discovered on the Python Package Index (PyPI), the official repository for Python libraries. These packages reportedly remained undetected for over a year, silently compromising developer environments and exfiltrating sensitive data. As reported by a cybersecurity researcher, Leonid…
-
Helldown Ransomware Attacking VMware ESXi And Linux Servers
Helldown, a new ransomware group, actively exploits vulnerabilities to breach networks, as since August 2024, they have compromised 28 victims, leaking their data on a dedicated website. The ransomware group IS has updated its data leak site, removing three victims, possibly indicating successful ransom payments by continuing its double extortion tactic, stealing and threatening to…