Tag: infrastructure
-
Russia plotting to use AI to enhance cyber-attacks against UK, minister will warn
Pat McFadden will tell a Nato conference on Monday that Russia could knock out the UK’s electricity gridRussia and other adversaries of the UK are trying to use artificial intelligence to enhance cyber-attacks against the nation’s infrastructure, the cabinet minister Pat McFadden will warn at a Nato conference in London on Monday.The chancellor of the…
-
The story behind the Health Infrastructure Security and Accountability Act
Tags: infrastructureFirst seen on theregister.com Jump to article: www.theregister.com/2024/10/29/hold_the_story_behind_the/
-
Volunteer DEF CON hackers dive into America’s leaky water infrastructure
Six sites targeted for security clean-up, just 49,994 to go First seen on theregister.com Jump to article: www.theregister.com/2024/11/24/water_defcon_hacker/
-
Response to CISA Advisory (AA24-326A): Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization
In response to the recently published CISA Advisory (AA24-326A) which highlights the CISA Red Team’s simulation of real-world malicious cyber operations, AttackIQ has provided actionable recommendations to help organizations emulate these attacks. These guidelines enable organizations to emulate tactics and techniques, helping to assess and improve their defenses against similar adversarial behaviors. First seen on…
-
USDA Pioneers Phishing-Resistant MFA with Fast IDentity Online (FIDO)
The Cybersecurity and Infrastructure Security Agency (CISA) has published an insightful report detailing the U.S. Department of Agriculture’s (USDA) successful implementation of phishing-resistant multi-factor authentication (MFA) using Fast IDentity Online... First seen on securityonline.info Jump to article: securityonline.info/usda-pioneers-phishing-resistant-mfa-with-fast-identity-online-fido/
-
North Korean IT Workers Using Fake Sites to Evade Detection
Researches Find Deep Ties to North Korea Among Fake IT Services Firms Websites. North Korean state actors are using fake websites of foreign technology services firms sidestep sanctions and raise funding for Kim Jong-un regime’s weapons development programs. SentinelLabs found many of these sites shared similar infrastructure, owners and locations. First seen on govinfosecurity.com Jump…
-
Over Half of Top Routinely Exploited Vulnerabilities in 2023 Affected Network Devices and Infrastructure
Over half of the most routinely exploited vulnerabilities worldwide in 2023 affected network devices and infrastructure, according to a cybersecurity advisory issued by CISA and other international cybersecurity agencies in November, 2024. Furthermore, the majority of the routinely exploited vulnerabilities were “initially exploited as a zero-day” which was a change from 2022, when the majority……
-
Cybersecurity Snapshot: Prompt Injection and Data Disclosure Top OWASP’s List of Cyber Risks for GenAI LLM Apps
Tags: access, advisory, ai, application-security, attack, backup, best-practice, breach, cisa, cloud, computer, cve, cyber, cyberattack, cybercrime, cybersecurity, data, exploit, extortion, firewall, framework, governance, government, group, guide, Hardware, incident, incident response, infrastructure, injection, intelligence, Internet, LLM, malicious, microsoft, mitigation, mitre, monitoring, network, nist, office, open-source, powershell, privacy, ransomware, regulation, risk, risk-management, russia, service, skills, software, sql, strategy, supply-chain, tactics, technology, theft, threat, tool, update, vulnerability, vulnerability-management, windowsDon’t miss OWASP’s update to its “Top 10 Risks for LLMs” list. Plus, the ranking of the most harmful software weaknesses is out. Meanwhile, critical infrastructure orgs have a new framework for using AI securely. And get the latest on the BianLian ransomware gang and on the challenges of protecting water and transportation systems against…
-
U.S. CISA adds Apple, Oracle Agile PLM bugs to its Known Exploited Vulnerabilities catalog
Tags: apple, cisa, cve, cybersecurity, exploit, infrastructure, kev, oracle, update, vulnerability, zero-dayU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple, Oracle Agile PLM bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: This week, Apple released security updates for two zero-day vulnerabilities, tracked as CVE-2024-44309 and CVE-2024-44308, in iOS, iPadOS,…
-
145,000 ICS Systems, Thousands of HMIs Exposed to Cyber Attacks
Critical infrastructure, the lifeblood of modern society, is under increasing threat as a new report from Censys reveals that over 145,000 industrial control system (ICS) devices are exposed to the internet. Among these, thousands of human-machine interfaces (HMIs), which allow operators to control critical systems, remain unsecured, leaving them vulnerable to exploitation by […] The…
-
>>PopeyeTools<< Dismantled: Justice Department Seizes Cybercrime Marketplace and Charges Administrators
In a significant operation targeting cybercriminal infrastructure, the U.S. Department of Justice announced the seizure of PopeyeTools, an illicit online marketplace specializing in the sale of stolen credit cards, bank... First seen on securityonline.info Jump to article: securityonline.info/popeyetools-dismantled-justice-department-seizes-cybercrime-marketplace-and-charges-administrators/
-
Volt Typhoon: Chinese State-Sponsored APT Targets U.S. Critical Infrastructure
The Tenable Security Response Team has uncovered critical details about Volt Typhoon, a state-sponsored Advanced Persistent Threat (APT) group linked to the People’s Republic of China. The group has been... First seen on securityonline.info Jump to article: securityonline.info/volt-typhoon-chinese-state-sponsored-apt-targets-u-s-critical-infrastructure/
-
BTS #42 The China Threat
In this episode, Paul Asadoorian, Allan Alford, and Josh Corman discuss the growing threat posed by China, particularly in the context of cyber operations and geopolitical ambitions. They explore the implications of China’s strategies, the vulnerabilities in critical infrastructure, and the need for transparency and trust in digital systems. The conversation highlights the urgency of……
-
Microsoft Takes Action Against Phishing-as-a-Service Platform
The ONNX infrastructure has been servicing criminal actors as far back as 2017. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/microsoft-takes-action-against-phishing-service-platform
-
CISA Red Team Finds Alarming Critical Infrastructure Risks
Tags: cisa, cyber, defense, detection, endpoint, infrastructure, network, RedTeam, risk, vulnerabilityRed Team Finds Vulnerabilities in Critical Infrastructure Org’s Security Framework. The U.S., cyber defense agency is urging critical infrastructure operators to learn from the experience of a volunteer read teaming test and not rely too heavily on host-based endpoint detection and response solutions at the expense of network layer protections. First seen on govinfosecurity.com Jump…
-
Five Cyber Agencies Sound Alarm About Active Directory Attacks: Beyond the Basics
Tags: access, attack, authentication, cloud, compliance, control, credentials, cyber, cybersecurity, data, defense, detection, exploit, framework, iam, identity, infrastructure, intelligence, least-privilege, login, mfa, microsoft, monitoring, password, risk, service, software, strategy, tactics, threat, tool, update, vulnerabilityA landmark global report emphasizes 17 attack techniques against Microsoft Active Directory and cautions organizations to step up protections. In the second of our two-part series, we take you beyond the basics to highlight three key areas to focus on. The landmark report Detecting and Mitigating Active Directory Compromises, released in September by cybersecurity agencies…
-
CISA says BianLian ransomware now focuses only on data theft
Tags: advisory, cisa, cyber, cybersecurity, data, extortion, group, infrastructure, ransomware, tactics, theftThe BianLian ransomware operation has shifted its tactics, becoming primarily a data theft extortion group, according to an updated advisory from the U.S. Cybersecurity & Infrastructure Security Agency, the FBI, and the Australian Cyber Security Centre. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-says-bianlian-ransomware-now-focuses-only-on-data-theft/
-
Microsoft disrupts ONNX phishing-as-a-service infrastructure
Microsoft’s Digital Crimes Unit (DCU) has seized 240 domains used by customers of ONNX, a phishing-as-a-service (PhaaS) platform, to target companies and individuals across the United States and worldwide since at least 2017. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-disrupts-onnx-phishing-as-a-service-infrastructure/
-
The Dangerous Blend of Phishing for Government IDs and Facial Recognition Video
In an era where online convenience has become the norm, the risk of identity theft through scam websites has surged. The potential for exploitation grows as more services transition to conducting business online. These sites pose a significant risk to personal security and undermine public trust in the digital infrastructure we have in place. A…
-
A timeline of cyber-resilience: fortifying critical national infrastructure
By Peter Lenk, Tech Lead at Goldilock Critical national infrastructure (CNI) faces a mounting threat landscape, necessitating a fundamental overhaul of security strategies. Consider last summer’s attack on London hospitals, where just one cyber incident resulted in the postponement of 1,255 planned operations and 3,396 appointments. Incidents like this are unfortunately no longer exceptional. Following…
-
How businesses can prepare for the 47-day certificate lifecycle: What it means and recent updates
Apple’s proposal to shorten SSL/TLS certificate lifespans to 47 days by 2028 emphasizes enhanced security and automation. Shorter cycles reduce vulnerabilities, encourage automated certificate management, and push businesses to adopt efficient tools like ACME protocols. While the proposal isn’t yet mandatory, businesses must prepare by modernizing infrastructure, automating renewal processes, and training teams. Adapting early…
-
Researchers Detailed FrostyGoop Malware Attacking ICS Devices
FrostyGoop, a newly discovered OT-centric malware that exploited Modbus TCP to disrupt critical infrastructure in Ukraine, capable of both internal and external attacks, targets industrial control systems (ICS) devices. By sending malicious Modbus commands, FrostyGoop can cause physical damage to the environment, as analysis has uncovered additional samples, configuration files, and network communication patterns associated…
-
Protecting Critical Infrastructure with Zero-Trust and Microsegmentation
Ransomware attacks are increasingly targeting critical infrastructure, essential systems like energy, water, transportation and finance. In 2023 alone, over 40% of attacks hit these sectors, according to the FBI. Meanwhile, agencies like CISA and the UK’s NCSC warn infrastructure companies of mounting threats from state-sponsored adversaries or other malicious actors. The recent American Water.. First…
-
Rekoobe Backdoor In Open Directories Possibly Attacking TradingView Users
APT31, using the Rekoobe backdoor, has been observed targeting TradingView, a popular financial platform, as researchers discovered malicious domains mimicking TradingView, suggesting a potential interest in compromising the platform’s user community. By analyzing shared SSH keys, investigators identified additional infrastructure linked to this campaign and another open directory, highlighting the evolving tactics employed by APT31…
-
Volt Typhoon Attacking U.S. Critical Infra To Maintain Persistent Access
Tags: access, china, communications, cyber, exploit, infrastructure, network, technology, threat, vulnerabilityVolt Typhoon, a Chinese state-sponsored threat actor, targets critical infrastructure sectors like communications, energy, transportation, and water systems by pre-positions itself in target networks, often exploiting vulnerabilities in operational technology (OT) environments. Known for persistence and patient operations, Volt Typhoon has been tracked under various aliases, including BRONZE SILHOUETTE, Voltzite, Insidious Taurus, DEV-0391, UNC3236, and…
-
Nesic wählt Cloudbrink-SASE zur Bereitstellung von Managed-Services
Der japanische Systemintegrator NEC Networks & System Integration Corporation (NESIC) wird künftig den Personal-SASE-Service von Cloudbrink als Grundlage für sein Virtual-Trusted-Overlay-Network nutzen. Zudem wird Fujitsu ab Januar 2025 auf dem Nesic-Virtual-Trusted-Overlay-Network basierende Dienste als Teil der Symphonict-Cloud-Service-Infrastruktur des Unternehmens anbieten. Das Virtual-Trusted-Overlay-Network ermöglicht ein hochleistungsfähiges Zero-Trust-Networking unter Verwendung des Global-Edge-Mesh von Cloudbrink mit extrem niedrigen…
-
Bericht deckt Sicherheitslücken in US-Trinkwasserversorgung auf
Tags: infrastructureEin Bericht der U.S. Environmental Protection Agency (EPA) enthüllt Sicherheitslücken in der Infrastruktur für die Trinkwasserversorgung von bis zu 193 Millionen Menschen. First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/bericht-deckt-sicherheitslucken-in-us-trinkwasserversorgung-auf
-
CISA Warns Kemp LoadMaster OS Command Injection Vulnerability Exploited in Attacks
Tags: advisory, attack, cisa, cyber, cybersecurity, exploit, infrastructure, injection, threat, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent security advisory warning organizations about an active exploitation of a critical vulnerability in Progress Kemp LoadMaster, a popular load balancing and application delivery solution. Designated as CVE-2024-1212, the vulnerability allows remote, unauthenticated attackers to execute arbitrary commands on affected systems, posing a severe threat to organizations…