🖋️ Chinese APT41 Upgrades Malware Arsenal with DodgeBox and MoonWalk 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The Chinalinked advanced persistent threat APT group codenamed APT41 is suspected to be using an "advanced and upgraded version" of a known malware called StealthVector to deliver a previously undocumented backdoor dubbed MoonWalk. The new variant of StealthVector which is also referred to as DUSTPAN has been codenamed DodgeBox by Zscaler ThreatLabz, which discovered the loader strain in.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🧠 39% of MSPs report major setbacks when adapting to advanced security technologies 🧠
📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
SOPHOS, a leading global provider of managed security solutions, has recently released its annual MSP Perspectives report for 2024. This most recent report provides insights from 350 different managed service providers MSPs across the United States, United Kingdom, Germany and Australia on modern cybersecurity tools solutions. It also documents newly discovered risks and challenges in The post 39 of MSPs report major setbacks when adapting to advanced security technologies appeared first on Security Intelligence.📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
Security Intelligence
39% of MSPs report major setbacks when adapting to advanced security technologies
A new report reveals that over a third of MSPs are struggling to adapt their service offerings to cope with increasingly advanced cyber threats.
🕵️♂️ Akira Ransomware: Lightning-Fast Data Exfiltration in 2-Ish Hours 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The gang's time from initial access to draining data out of a Veeam server is shockingly fast after which the attackers went on to deploy actual ransomware in less than a day.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Akira Ransomware: Lightning-Fast Data Exfiltration in 2-ish Hours
The gang's time from initial access to draining data out of a Veeam server is shockingly fast; after which the attackers went on to deploy actual ransomware in less than a day.
🕵️♂️ Apple Warns iPhone Users in 98 Countries of More Spyware Attacks 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Users receiving the warnings are likely being targeted based on who they are or what they do, according to the vendor.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Apple Warns iPhone Users in 98 Countries of More Spyware Attacks
Users receiving the warnings are likely being targeted based on who they are or what they do, according to the vendor.
🕵️♂️ Trade the Comfort of Security Theater for True Security 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
It's time to wipe off the flattering grease paint and instead make executives see the real face of cybersecurity that works.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Trade the Comfort of Security Theater for True Security
It's time to wipe off the flattering grease paint and instead make executives see the real face of cybersecurity that works.
🕵️♂️ Advance Auto Parts Data Breach Affects 2.3M Customers 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Threat actors had access to the automotive provider's networks for more than a month before they were discovered.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Advance Auto Parts Data Breach Affects 2.3M Customers
Threat actors had access to the automotive provider's networks for more than a month before they were discovered.
🕵️♂️ FishXProxy Phishing Kit Outfits Cybercriminals for Success 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
A new endtoend toolkit circulating on the Dark Web significantly lowers the barrier to entry for creating sophisticated campaigns that can avoid most traditional security detection and protection systems.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
FishXProxy Phishing Kit Outfits Cybercriminals for Success
A new end-to-end toolkit circulating on the Dark Web significantly lowers the barrier for creating sophisticated campaigns that can avoid most traditional security detection and protection systems.
🕵️♂️ Microsoft Melds Identity & SSE With Entra Suite 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The integration of Entra Identity offerings with new security service edge SSE services to provide unified conditional access is seeking enterprise approval.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
Microsoft Melds Identity & SSE With Entra Suite
The integration of Entra Identity offerings with new security service edge services to provide unified conditional access is seeking enterprise approval.
🕵️♂️ 'Crystalray' Attacks Jump 10X, Using Only OSS to Steal Credentials 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Remember when hackers used to write their own malware? Kids these days don't want to work, they just want freely available tools to do it for them.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
Credential-Stealing OSS 'Crystalray' Attacks Jump 10X
Remember when hackers used to write their own malware? Kids these days don't want to work, they just want freely available tools to do it for them.
🕵️♂️ Centralized Cyber-Incident Reporting Can Improve Effectiveness 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Companies need robust cyberresponse plans and a straightforward path to transparency.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Centralized Cyber-Incident Reporting Can Improve Effectiveness
Companies need robust cyber-response plans and a straightforward path to transparency.
🦿 BlastRADIUS Vulnerability Discovered in RADIUS Protocol Used in Corporate Networks and Cloud 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Exploiting the BlastRADIUS vulnerability leverages a maninthemiddle attack on the RADIUS authentication process.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
BlastRADIUS Vulnerability Discovered in RADIUS Protocol Used in Corporate Networks and Cloud
Cyber security researchers have exposed a vulnerability in the RADIUS protocol, dubbed BlastRADIUS.
🛠 Wireshark Analyzer 4.2.6 🛠
📖 Read more.
🔗 Via "Packet Storm - Tools"
----------
👁️ Seen on @cibsecurity
Wireshark is a GTKbased network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercialquality analyzer for Unix and Win32 and to give Wireshark features that are missing from closedsource sniffers. This is the source code release.📖 Read more.
🔗 Via "Packet Storm - Tools"
----------
👁️ Seen on @cibsecurity
packetstorm.news
Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers
🧠 CDK breach compromises customer data from 15,000 car dealers 🧠
📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
In late June, more than 15,000 car dealerships across North America were affected by a cyberattack on CDK Global, which provides software to car dealers. After two cyberattacks over two days, CDK shut down all systems, which caused delays for car buyers and disruptions for the dealerships. Many dealerships went back to manual processes, including The post CDK breach compromises customer data from 15,000 car dealers appeared first on Security Intelligence.📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
Security Intelligence
CDK breach compromises customer data from 15,000 car dealers
A cyberattack on CDK Global has affected over 15,000 car dealerships using the software. Customers should assume their information has been breached.
🖋️ Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE20245910 CVSS score 9.3, the vulnerability has been described as a case of missing authentication in its Expedition migration tool that could lead to an admin account takeover. "Missing authentication.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ 60 New Malicious Packages Uncovered in NuGet Supply Chain Attack 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Threat actors have been observed publishing a new wave of malicious packages to the NuGet package manager as part of an ongoing campaign that began in August 2023, while also adding a new layer of stealth to evade detection. The fresh packages, about 60 in number and spanning 290 versions, demonstrate a refined approach from the previous set that came to light in October 2023, software supply.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 CISA Urges Software Makers to Eliminate OS Command Injection Vulnerabilities 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
An alert from the CISA and the FBI has urged software manufacturers to work towards the elimination of operating system OS command injection vulnerabilities.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
CISA Urges Software Makers to Eliminate OS Command Injection Vulnerabilities
An alert from the CISA and the FBI has urged software manufacturers to work towards the elimination of operating system (OS) command injection vulnerabilities
👍1
🖋️ U.S. Seizes Domains Used by AI-Powered Russian Bot Farm for Disinformation 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The U.S. Department of Justice DoJ said it seized two internet domains and searched nearly 1,000 social media accounts that Russian threat actors allegedly used to covertly spread proKremlin disinformation in the country and abroad on a large scale. "The social media bot farm used elements of AI to create fictitious social media profiles often purporting to belong to individuals in the.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 NATO Set to Build New Cyber Defense Center 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
NATO members have agreed to develop a new integrated facility to help improve collective cyberresilience.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
NATO Set to Build New Cyber Defense Center
NATO members have agreed to develop a new integrated facility to help improve collective cyber-resilience
📢 How cyber attacks damage mental health 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
As staff struggle to cope in the immediate aftermath of a cyber incident, leaders must do more to foster a culture of support.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
How cyber attacks damage mental health
As staff struggle to cope in the immediate aftermath of a cyber incident, leaders must do more to foster a culture of support
📢 This critical GitLab flaw allows attackers to run pipeline jobs as other users – patch now 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
A fix is now available for the flaw in the GitLab Community and Enterprise editions, and users are urged to patch immediately.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
This critical GitLab flaw allows attackers to run pipeline jobs as other users – patch now
A fix is now available for the flaw in the GitLab Community and Enterprise editions, and users are urged to patch immediately
🕵️♂️ Will Smaller Companies Buckle Under the SEC's New Requirements? 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Even though the new incident reporting rules create pressure, they serve as a forcing function for building a strong security foundation.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Will Smaller Companies Buckle Under the SEC's New Requirements?
Even though the new incident reporting rules create pressure, they serve as a forcing function for building a strong security foundation.