📔 Google Warns of Iranian Cyber-Attacks on Presidential Campaigns 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Google has highlighted sophisticated spearphishing attacks by Iranian state actor APT42 targeting individuals associated with the US Presidential campaign.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Google Warns of Iranian Cyber-Attacks on Presidential Campaigns
Google has highlighted sophisticated spearphishing attacks by Iranian state actor APT42 targeting individuals associated with the US Presidential campaign
📔 SolarWinds Urges Upgrade After Revealing Critical RCE Bug 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
SolarWinds has discovered and fixed a critical remote code execution vulnerability in Web Help Desk.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
SolarWinds Urges Upgrade After Revealing Critical RCE Bug
SolarWinds has discovered and fixed a critical remote code execution vulnerability in Web Help Desk
📢 NetSuite vulnerability could leave thousands of websites exposed 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The issue stems from a misconfiguration of access controls in NetSuite's SuiteCommerce instances.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
NetSuite vulnerability could leave thousands of websites exposed
The issue stems from a misconfiguration of access controls in NetSuite's SuiteCommerce instances
♟️ NationalPublicData.com Hack Exposes a Nation’s Data ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a littleknown but aptlynamed consumer data broker called NationalPublicData.com. This post examines what we know about a breach that has exposed hundreds of millions of consumer records. We'll also take a closer look at the data broker that got hacked a background check company founded by an actor and retired sheriff's deputy from Florida.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
NationalPublicData.com Hack Exposes a Nation’s Data
A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a little-known but aptly-named consumer data broker called NationalPublicData.com. This post…
📢 A flaw in Proofpoint’s anti-phishing platform allowed a hacker to send millions of spam emails 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The attacker was able to manufacture fully authenticated spam emails addressed from Proofpoint customers.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
A flaw in Proofpoint’s anti-phishing platform allowed a hacker to send millions of spam emails
The attacker was able to manufacture fully authenticated spam emails addressed from Proofpoint customers
🕵️♂️ White House Pledges $10 Million for Open Source Initiative 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The OpenSource Software Prevalence Initiative, announced at DEF CON, will examine how open source software is used in critical infrastructure.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
White House Pledges $10 Million for Open Source Initiative
The Open-Source Software Prevalence Initiative, announced at DEF CON, will examine how open source software is used in critical infrastructure.
🕵️♂️ DARPA Announces AI Cyber Challenge Finalists 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Teams designed AI systems to secure open source infrastructure software to be used in industries like financial services, utilities, and healthcare. Each finalist was awarded a 2 million prize.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
DARPA Announces AI Cyber Challenge Finalists
Teams designed AI systems to secure open source infrastructure software to be used in industries like financial services, utilities, and healthcare. Each finalist was awarded a $2 million prize.
🖋️ Multi-Stage ValleyRAT Targets Chinese Users with Advanced Tactics 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Chinesespeaking users are the target of an ongoing campaign that distributes malware known as ValleyRAT. "ValleyRAT is a multistage malware that utilizes diverse techniques to monitor and control its victims and deploy arbitrary plugins to cause further damage," Fortinet FortiGuard Labs researchers Eduardo Altares and Joie Salvio said. "Another noteworthy characteristic of this malware is its.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ The Hidden Security Gaps in Your SaaS Apps: Are You Doing Due Diligence? 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
SaaS applications have become indispensable for organizations aiming to enhance productivity and streamline operations. However, the convenience and efficiency these applications offer come with inherent security risks, often leaving hidden gaps that can be exploited. Conducting thorough due diligence on SaaS apps is essential to identify and mitigate these risks, ensuring the protection of your.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ New Banshee Stealer Targets 100+ Browser Extensions on Apple macOS Systems 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have uncovered new stealer malware that's designed to specifically target Apple macOS systems. Dubbed Banshee Stealer, it's offered for sale in the cybercrime underground for a steep price of 3,000 a month and works across both x8664 and ARM64 architectures. "Banshee Stealer targets a wide range of browsers, cryptocurrency wallets, and around 100 browser.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A large percentage of Google's own Pixel devices shipped globally since September 2017 included dormant software that could be used to stage nefarious attacks and deliver various kinds of malware. The issue manifests in the form of a preinstalled Android app called "Showcase.apk" that comes with excessive system privileges, including the ability to remotely execute code and install arbitrary.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Microsoft Mandates MFA for All Azure Sign-Ins 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Microsoft is mandating MFA for all Azure signins, with customers given 60day advance notices to start implementation.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Microsoft Mandates MFA for All Azure Sign-Ins
Microsoft is mandating MFA for all Azure sign-ins, with customers given 60-day advance notices to start implementation
📔 Florida-Based National Public Data Confirms Data Breach 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The US data broker did not address the threat actors claim that the breach concerns 2.9 billion records.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Florida-Based National Public Data Confirms Data Breach
The US data broker did not address the threat actor’s claim that the breach concerns 2.9 billion records
📔 Geopolitical Tensions Drive Explosion in DDoS Attacks 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Radware found that Web DDoS attacks rose by 265 in H1 2024, driven by hacktivist groups amid rising geopolitical tensions.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Geopolitical Tensions Drive Explosion in DDoS Attacks
Radware found that Web DDoS attacks rose by 265% in H1 2024, driven by hacktivist groups amid rising geopolitical tensions
🦅 World Agricultural Cycling Competition (WACC) Participants Targeted for Havoc C2 Dissemination 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Key Takeaways Cyble Research and Intelligence Labs CRIL recently identified a phishing site that closely mimics the official website of the World Agricultural Cycling Competition WACC. This deceptive site was crafted by a Threat Actor TA who replicated the legitimate WACC site with only minor modifications, making it challenging for unsuspecting visitors to differentiate between the two. The World Agricultural Cycling Competition is an event held in France that aims to bridge the gap between the agriculture and sports industries. The timing and context suggest that the TA is likely targeting stakeholders and participants within this specific region and sector, aiming to exploit the event's popularity and relevance. The phishing campaign was deliberately launched in July 2024,...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
WACC Participants Targeted For Havoc C2 Attack
Explore how Cyble uncovered a phishing site exploiting the World Agricultural Cycling Competition to distribute Havoc C2 malware
🖋️ Russian Hackers Using Fake Brand Sites to Spread DanaBot and StealC Malware 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have shed light on a sophisticated information stealer campaign that impersonates legitimate brands to distribute malware like DanaBot and StealC. The activity cluster, orchestrated by Russianspeaking cybercriminals and collectively codenamed Tusk, is said to encompass several subcampaigns, leveraging the reputation of the platforms to trick users into downloading the.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Why Are Organizations Losing the Ransomware Battle? 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Institutionalizing and sustaining fundamental cybersecurity practices requires a commitment to ongoing vigilance, active management, and a comprehensive understanding of evolving threats.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
Why Are Organizations Losing the Ransomware Battle?
Institutionalizing and sustaining fundamental cybersecurity practices requires a commitment to ongoing vigilance, active management, and a comprehensive understanding of evolving threats.
📔 US Bipartisan Committee Urges Investigation Into Chinese Wi-Fi Routers 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Two Congressmen fear that the Chinese government might use TPLink WiFi routers to deploy hacking and espionage campaigns in the US.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
US Bipartisan Committee Urges Investigation Into Chinese Wi-Fi Routers
Two Congressmen fear that the Chinese government might use TP-Link Wi-Fi routers to deploy hacking and espionage campaigns in the US
🖋️ Russian Hacker Jailed 3+ Years for Selling Stolen Credentials on Dark Web 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A 27yearold Russian national has been sentenced to over three years in prison for peddling financial information, login credentials, and other personally identifying information PII on a nowdefunct dark web marketplace called Slilpp. Georgy Kavzharadze, 27, of Moscow, Russia, pleaded guilty to one count of conspiracy to commit bank fraud and wire fraud earlier this February. In addition to.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🦿 Security Experts Welcome NIST’s New Encryption Standards For Quantum Computers 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Although quantum computing is not yet widespread, current encryption methods pose a significant risk of cyberattacks, the agency said.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Security Experts Welcome NIST’s New Encryption Standards For Quantum Computers
NIST announces new post-quantum cryptography standards, marking a significant step in safeguarding data against future quantum computing threats.
🕵️♂️ Iran Reportedly Grapples With Major Cyberattack on Banking Systems 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The last known cyberattack waged against Iranian infrastructure took place last December with the blame placed on Israel and the US.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
Iran Reportedly Grapples With Major Cyberattack on Banking Systems
The last known cyberattack waged against Iranian infrastructure took place last December with blame placed on Israel and the US.
👍1