🖋️ RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A cybercrime group with links to the RansomHub ransomware has been observed using a new tool designed to terminate endpoint detection and response EDR software on compromised hosts, joining the likes of other similar programs like AuKill aka AvNeutralizer and Terminator. The EDRkilling utility has been dubbed EDRKillShifter by cybersecurity company Sophos, which discovered the tool in.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Cyber-criminals Exploited Paris Olympics With Fake Domains 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
166 Olympicsrelated domains displayed signs of DNS abuse like keyword stuffing and typosquatting.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Cyber-criminals Exploited Paris Olympics With Fake Domains
166 Olympics-related domains displayed signs of DNS abuse like keyword stuffing and typosquatting
📔 Advanced ValleyRAT Campaign Hits Windows Users in China 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Discovered by FortiGuard Labs, the ValleyRAT campaign targets Chinese Windows systems.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Advanced ValleyRAT Campaign Hits Windows Users in China
Discovered by FortiGuard Labs, the ValleyRAT campaign targets Chinese Windows systems
👏1
📔 Cyber-criminals Exploited Paris Olympics With Fake Domains 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
166 Olympicsrelated domains displayed signs of DNS abuse like keyword stuffing and typosquatting.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Cyber-criminals Exploited Paris Olympics With Fake Domains
166 Olympics-related domains displayed signs of DNS abuse like keyword stuffing and typosquatting
📔 Advanced ValleyRAT Campaign Hits Windows Users in China 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Discovered by FortiGuard Labs, the ValleyRAT campaign targets Chinese Windows systems.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Advanced ValleyRAT Campaign Hits Windows Users in China
Discovered by FortiGuard Labs, the ValleyRAT campaign targets Chinese Windows systems
📔 Russia's FSB Behind Massive Phishing Espionage Campaign 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Citizen Lab attributed the campaign to Coldriver, a notorious FSB subordinate team, and Coldwastrel, a new, Russianaligned group.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Russia's FSB Behind Massive Phishing Espionage Campaign
Citizen Lab attributed the campaign to Coldriver, a notorious FSB subordinate team, and Coldwastrel, a new, Russian-aligned group
📔 Another Record Year For Ransomware Beckons as Crypto Profits Hit $460m 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Ransom payments in the first half of 2024 hit 460m, according to Chainalysis.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Another Record Year For Ransomware Beckons as Crypto Profits Hit $460m
Ransom payments in the first half of 2024 hit $460m, according to Chainalysis
📔 Google Warns of Iranian Cyber-Attacks on Presidential Campaigns 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Google has highlighted sophisticated spearphishing attacks by Iranian state actor APT42 targeting individuals associated with the US Presidential campaign.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Google Warns of Iranian Cyber-Attacks on Presidential Campaigns
Google has highlighted sophisticated spearphishing attacks by Iranian state actor APT42 targeting individuals associated with the US Presidential campaign
📔 SolarWinds Urges Upgrade After Revealing Critical RCE Bug 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
SolarWinds has discovered and fixed a critical remote code execution vulnerability in Web Help Desk.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
SolarWinds Urges Upgrade After Revealing Critical RCE Bug
SolarWinds has discovered and fixed a critical remote code execution vulnerability in Web Help Desk
📢 NetSuite vulnerability could leave thousands of websites exposed 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The issue stems from a misconfiguration of access controls in NetSuite's SuiteCommerce instances.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
NetSuite vulnerability could leave thousands of websites exposed
The issue stems from a misconfiguration of access controls in NetSuite's SuiteCommerce instances
♟️ NationalPublicData.com Hack Exposes a Nation’s Data ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a littleknown but aptlynamed consumer data broker called NationalPublicData.com. This post examines what we know about a breach that has exposed hundreds of millions of consumer records. We'll also take a closer look at the data broker that got hacked a background check company founded by an actor and retired sheriff's deputy from Florida.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
NationalPublicData.com Hack Exposes a Nation’s Data
A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a little-known but aptly-named consumer data broker called NationalPublicData.com. This post…
📢 A flaw in Proofpoint’s anti-phishing platform allowed a hacker to send millions of spam emails 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The attacker was able to manufacture fully authenticated spam emails addressed from Proofpoint customers.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
A flaw in Proofpoint’s anti-phishing platform allowed a hacker to send millions of spam emails
The attacker was able to manufacture fully authenticated spam emails addressed from Proofpoint customers
🕵️♂️ White House Pledges $10 Million for Open Source Initiative 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The OpenSource Software Prevalence Initiative, announced at DEF CON, will examine how open source software is used in critical infrastructure.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
White House Pledges $10 Million for Open Source Initiative
The Open-Source Software Prevalence Initiative, announced at DEF CON, will examine how open source software is used in critical infrastructure.
🕵️♂️ DARPA Announces AI Cyber Challenge Finalists 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Teams designed AI systems to secure open source infrastructure software to be used in industries like financial services, utilities, and healthcare. Each finalist was awarded a 2 million prize.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
DARPA Announces AI Cyber Challenge Finalists
Teams designed AI systems to secure open source infrastructure software to be used in industries like financial services, utilities, and healthcare. Each finalist was awarded a $2 million prize.
🖋️ Multi-Stage ValleyRAT Targets Chinese Users with Advanced Tactics 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Chinesespeaking users are the target of an ongoing campaign that distributes malware known as ValleyRAT. "ValleyRAT is a multistage malware that utilizes diverse techniques to monitor and control its victims and deploy arbitrary plugins to cause further damage," Fortinet FortiGuard Labs researchers Eduardo Altares and Joie Salvio said. "Another noteworthy characteristic of this malware is its.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ The Hidden Security Gaps in Your SaaS Apps: Are You Doing Due Diligence? 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
SaaS applications have become indispensable for organizations aiming to enhance productivity and streamline operations. However, the convenience and efficiency these applications offer come with inherent security risks, often leaving hidden gaps that can be exploited. Conducting thorough due diligence on SaaS apps is essential to identify and mitigate these risks, ensuring the protection of your.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ New Banshee Stealer Targets 100+ Browser Extensions on Apple macOS Systems 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have uncovered new stealer malware that's designed to specifically target Apple macOS systems. Dubbed Banshee Stealer, it's offered for sale in the cybercrime underground for a steep price of 3,000 a month and works across both x8664 and ARM64 architectures. "Banshee Stealer targets a wide range of browsers, cryptocurrency wallets, and around 100 browser.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A large percentage of Google's own Pixel devices shipped globally since September 2017 included dormant software that could be used to stage nefarious attacks and deliver various kinds of malware. The issue manifests in the form of a preinstalled Android app called "Showcase.apk" that comes with excessive system privileges, including the ability to remotely execute code and install arbitrary.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Microsoft Mandates MFA for All Azure Sign-Ins 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Microsoft is mandating MFA for all Azure signins, with customers given 60day advance notices to start implementation.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Microsoft Mandates MFA for All Azure Sign-Ins
Microsoft is mandating MFA for all Azure sign-ins, with customers given 60-day advance notices to start implementation
📔 Florida-Based National Public Data Confirms Data Breach 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The US data broker did not address the threat actors claim that the breach concerns 2.9 billion records.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Florida-Based National Public Data Confirms Data Breach
The US data broker did not address the threat actor’s claim that the breach concerns 2.9 billion records
📔 Geopolitical Tensions Drive Explosion in DDoS Attacks 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Radware found that Web DDoS attacks rose by 265 in H1 2024, driven by hacktivist groups amid rising geopolitical tensions.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Geopolitical Tensions Drive Explosion in DDoS Attacks
Radware found that Web DDoS attacks rose by 265% in H1 2024, driven by hacktivist groups amid rising geopolitical tensions