🖋️ Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Details have emerged about a nowpatched security flaw in Styra's Open Policy Agent OPA that, if successfully exploited, could have led to leakage of New Technology LAN Manager NTLM hashes. "The vulnerability could have allowed an attacker to leak the NTLM credentials of the OPA server's local user account to a remote server, potentially allowing the attacker to relay the authentication or.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Bad actors have been observed targeting Docker remote API servers to deploy the SRBMiner crypto miner on compromised instances, according to new findings from Trend Micro. "In this attack, the threat actor used the gRPC protocol over h2c to evade security solutions and execute their crypto mining operations on the Docker host," researchers Abdelrahman Esmail and Sunil Bharti said in a technical.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 75% of US Senate Campaign Websites Fail to Implement DMARC 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
75 of US Senate campaign sites lack DMARC, risking cybersecurity and email safety.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
75% of US Senate Campaign Websites Fail to Implement DMARC
75% of US Senate campaign sites lack DMARC, risking cybersecurity and email safety
🧠 What NIST’s post-quantum cryptography standards mean for data security 🧠
📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
Data security is the cornerstone of every business operation. Today, the security of sensitive data and communication depends on traditional cryptography methods, such as the RSA algorithm. While such algorithms secure against todays threats, organizations must continue to look forward and begin to prepare against upcoming risk factors. The National Institute of Standards and Technology The post What NISTs postquantum cryptography standards mean for data security appeared first on Security Intelligence.📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
Security Intelligence
What NIST’s post-quantum cryptography standards mean for data security
NIST has published its first set of post-quantum cryptography standards. What does this mean for data security and cybersecurity as we know it?
🕵️♂️ Swarms of Fake WordPress Plug-ins Infect Sites With Infostealers 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
GoDaddy flagged a ClickFix campaign that infected 6,000 sites in a oneday period, with attackers using stolen admin credentials to distribute malware.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
Fake WordPress Plug-ins Infect Sites With Infostealers
GoDaddy flagged a ClickFix campaign that infected 6,000 sites in a one-day period, with attackers using stolen admin credentials to distribute malware.
🕵️♂️ Tricky CAPTCHA Caught Dropping Lumma Stealer Malware 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The persistent infostealer's latest campaign inserts fake CAPTCHA pages into legitimate applications, fooling users into executing the malicious payload, researchers find.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Tricky CAPTCHA Caught Dropping Lumma Stealer Malware
The persistent infostealer's latest campaign inserts fake CAPTCHA pages into legitimate applications, fooling users into executing the payload, researchers find.
🖋️ Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Russianspeaking users have become the target of a new phishing campaign that leverages an opensource phishing toolkit called Gophish to deliver DarkCrystal RAT aka DCRat and a previously undocumented remote access trojan dubbed PowerRAT. "The campaign involves modular infection chains that are either Maldoc or HTMLbased infections and require the victim's intervention to trigger the.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 LLMjacking and Open-Source Tool Abuse Surge in 2024 Cloud Attacks 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Cloud attacks surged in 2024 as attackers exploited cloud resources at unprecedented levels.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
LLMjacking and Open-Source Tool Abuse Surge in 2024 Cloud Attacks
Cloud attacks surged in 2024 as attackers exploited cloud resources at unprecedented levels
📔 SEC Charges Tech Firms Over Misleading SolarWinds Hack Disclosures 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Four current and former publicly trading tech companies have agreed to pay civil penalties in relation to the SEC charges.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
SEC Charges Tech Firms Over Misleading SolarWinds Hack Disclosures
Four current and former publicly trading tech companies have agreed to pay civil penalties in relation to the SEC charges
👍1
🪖 IoT Assignment Completed! Report on Barriers to U.S. IoT Adoption 🪖
📖 Read more.
🔗 Via "NIST"
----------
👁️ Seen on @cibsecurity
The 16 members of the NISTmanaged Internet of Things IoT Advisory Board have completed their report on barriers to the U.S. receiving the benefits of IoT adoption, along with their recommendations for overcoming those barriers. As Benson Chan Chair and Dan Caprio Vice Chair of the IoT Advisory Board state in the report The United States is in the early stages of a profound transformation, one that is driven by economic, societal, and cultural innovations brought about by the IoT. These innovations intertwine connectivity and digital innovation with the opportunity to drive a.📖 Read more.
🔗 Via "NIST"
----------
👁️ Seen on @cibsecurity
NIST
IoT Assignment Completed! Report on Barriers to U.S. IoT Adoption
The 16 members of the NIST-managed Internet of Things (IoT) Advisory Board have completed
🕵️♂️ Samsung Zero-Day Vuln Under Active Exploit, Google Warns 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
If exploited, bad actors can execute arbitrary code while evading detection thanks to a renamed process.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
Samsung Zero-Day Vuln Under Active Exploit, Google Warns
If it's exploited, bad actors are capable of executing arbitrary code while evading detection due to a renamed process.
🕵️♂️ OPA for Windows Vulnerability Exposes NTLM Hashes 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The vulnerability affects all versions prior to v0.68.0 and highlights the risks organizations assume when consuming open source software and code.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
OPA for Windows Vulnerability Exposes NTLM Hashes
The vulnerability affects all versions prior to v0.68.0 and highlights the risks organizations assume when consuming open source software and code.
🕵️♂️ Most US Political Campaigns Lack DMARC Email Protection 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Without DMARC, campaigns remain highly susceptible to phishing, domain spoofing, and impersonation.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Most US Political Campaigns Lack DMARC Email Protection
Without DMARC, campaigns remain highly susceptible to phishing, domain spoofing, and impersonation.
📢 Hackers are stepping up ‘qishing’ attacks by hiding malicious QR codes in PDF email attachments 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Malicious QR codes hidden in email attachments may be missed by traditional email security scanners, with over 500,000 qishing attacks launched in the last three months.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
Hackers are stepping up ‘qishing’ attacks by hiding malicious QR codes in PDF email attachments
Malicious QR codes hidden in email attachments may be missed by traditional email security scanners, with over 500,000 qishing attacks launched in the last three months
🖋️ Researchers Reveal 'Deceptive Delight' Method to Jailbreak AI Models 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have shed light on a new adversarial technique that could be used to jailbreak large language models LLMs during the course of an interactive conversation by sneaking in an undesirable instruction between benign ones. The approach has been codenamed Deceptive Delight by Palo Alto Networks Unit 42, which described it as both simple and effective, achieving an average.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Think You’re Secure? 49% of Enterprises Underestimate SaaS Risks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
It may come as a surprise to learn that 34 of security practitioners are in the dark about how many SaaS applications are deployed in their organizations. And its no wonderthe recent AppOmni 2024 State of SaaS Security Report reveals that only 15 of organizations centralize SaaS security within their cybersecurity teams. These statistics not only highlight a critical security blind spot,.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest Attacks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Threat actors have been observed abusing Amazon S3 Simple Storage Service Transfer Acceleration feature as part of ransomware attacks designed to exfiltrate victim data and upload them to S3 buckets under their control. "Attempts were made to disguise the Golang ransomware as the notorious LockBit ransomware," Trend Micro researchers Jaromir Horejsi and Nitesh Surana said. "However, such is.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
👽 French ISP Data for Sale 👽
📖 Read more.
🔗 Via "BE3SEC"
----------
👁️ Seen on @cibsecurity
Yesterday 22 Oct. a threat actor advertised data of the Frenchbased ISP Free SAS free.fr, in a dark web forum. According to the post, the data is affecting 19.2 million customers and contains over 5.11 million IBAN numbers. It affects all Free Mobile and Freebox customers, and includes the IBANs of all 5.11 million.📖 Read more.
🔗 Via "BE3SEC"
----------
👁️ Seen on @cibsecurity
be4sec
French ISP Data for Sale
Yesterday (22 Oct.) a threat actor advertised data of the French-based ISP “Free SAS” (free.fr), in a dark web forum. According to the post, the data is affecting 19.2 million customers…
📔 Internet Archive Secures Zendesk Account, Works Toward Full-Service Restoration 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
While Internet Archives services slowly resume, the data breach reveals the nonprofits security failures.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Internet Archive Secures Zendesk Account, Works Toward Full-Service Restoration
While Internet Archive’s services slowly resume, the data breach reveals the non-profit’s security failures
📔 US Government Pledges to Cyber Threat Sharing Via TLP Protocol 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The US government has issued guidance for federal agencies on the use of Traffic Light Protocol, designed to boost intelligence sharing with the cybersecurity community.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
US Government Pledges to Cyber Threat Sharing Via TLP Protocol
The US government has issued guidance for federal agencies on the use of Traffic Light Protocol, designed to boost intelligence sharing with the cybersecurity community
📔 UK Government Weighs Review of Computer Misuse Act to Combat Cybercrime 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The British Minister for Security Dan Jarvis said at Recorded Futures Predict 2024 that the new government was considering reforming the 1990 legislation.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
UK Government Weighs Review of Computer Misuse Act to Combat Cybercrime
The British Minister for Security Dan Jarvis said at Recorded Future’s Predict 2024 that the new government was considering reforming the 1990 legislation