π Head of Talent Acquisition π
π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurity
The post Head of Talent Acquisition appeared first on UnderDefense.π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurity
UnderDefense
Head of Talent Acquisition - UnderDefense
π¦
HeptaX: Unauthorized RDP Connections for Cyberespionage Operations π¦
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Key takeaways Cyble Research and Intelligence Labs CRIL came across an ongoing cyberattack campaign originating from malicious LNK files. The sophisticated multistage attack chain relies heavily on PowerShell and BAT scripts to streamline the download and execution of additional payloads, demonstrating the Threat Actors TA preference for scriptbased methods to evade detection by traditional security solutions. The attack involves the creation of an administrative account on the victims system and altering Remote Desktop settings to lower authentication requirements, simplifying unauthorized RDP access for the attacker. The campaign deploys an additional wellknown password recovery tool, ChromePass, which collects saved passwords from Chromiumbased browsers, increasing the ris...π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble
HeptaX: Unauthorized RDP Connections In Cyberespionage
Cyble analyzes HeptaX and their ongoing cyberattack campaign targeting the healthcare industry.
β€1π₯1
π¦
Cyble Unveils Four Groundbreaking Capabilities for Enhanced Threat Intelligence π¦
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
With rapid digital advancement, organizations face unprecedented challenges in safeguarding their assets and reputation. Recognizing this need, Cyble Inc. has launched four revolutionary capabilities tailored specifically for Cybersecurity for Executives. These innovations significantly advance Executive Protection and digital risk management, ensuring executives are equipped to navigate the complexities of modern threats. From safeguarding executive travels to countering deepfake threats and providing realtime Azure Security Monitoring, these capabilities highlight Cybles unwavering commitment to comprehensive security. Heres a closer look at each innovation and the unique benefits they bring to todays threat landscape. Physical Threat Intelligence for Executive Travel Ensuring Sa...π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble
Cyble Unveils 4 Groundbreaking Threat Intelligence Features
Discover how Cyble's new capabilitiesβPhysical Threat Intelligence for Travel, Deepfake Detection, Threat Lens, and Azure Exposure Monitorβrevolutionize cybersecurity for executives, ensuring their safety and protecting organizational integrity in an evolvingβ¦
π¦
CISA Warns of Critical Vulnerabilities: CVE-2024-20481 and CVE-2024-37383 Require Immediate Attention π¦
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Overview The Cybersecurity and Infrastructure Security Agency CISA has issued urgent advisories regarding two vulnerabilities that pose substantial risks to organizations CVE202420481, a denialofservice DoS vulnerability affecting Cisco Adaptive Security Appliance ASA and Firepower Threat Defense FTD, and CVE202437383, a crosssite scripting XSS vulnerability in RoundCube Webmail. Both vulnerabilities highlight the necessity for immediate action to safeguard against potential exploitation. The relevant CVE IDs for these vulnerabilities are CVE202437383 and CVE202420481. The first vulnerability, CVE202437383, affects Roundcube Webmail versions prior to 1.5.7 and 1.6.x before 1.6.7, while CVE202420481 impacts Cisco products running a vulnerable release of Cisco ASA or FTD Software wi...π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble
CISA Alerts On CVE-2024-20481 And CVE-2024-37383
CISA warns of critical vulnerabilities CVE-2024-20481 and CVE-2024-37383 affecting Cisco ASA and RoundCube Webmail.
π¦
Cyble Sensors Detect New Attacks on CMS; IoT Exploits Continue π¦
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Overview Cybles weekly sensor intelligence report detailed dozens of active attack campaigns against known vulnerabilities. New to the list are attacks on a vulnerability in the SPIP opensource content management CMS and publishing system, while previously reported campaigns targeting vulnerabilities in PHP, Linux systems, Java and Python frameworks, and more have continued unabated. Older vulnerabilities in IoT devices and embedded systems continue to be exploited at alarming rates. New to the report this week are exploits of vulnerabilities that may still be present in some Siemens products and network devices. As these vulnerabilities likely exist within some critical infrastructure environments, organizations with internetfacing IoT devices and embedded systems are advised t...π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble
Cyble Sensor Intelligence Report: October 16-22
Explore the latest Cyble sensor intelligence report, detailing active cyberattack campaigns targeting critical vulnerabilities across SPIP CMS, IoT devices, Linux systems, and embedded frameworks. Understand current threats, including phishing scams, bruteβ¦
π1
π΅οΈββοΈ LinkedIn Hit With $335M Fine for Data Privacy Violations π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
The networking company found liable for illegally gathering user data for targeted advertising by the Irish Data Protection Commission.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Darkreading
LinkedIn Hit With $335M Fine for Data Privacy Violations
The networking company found liable for illegally gathering user data for targeted advertising by the Irish Data Protection Commission.
π΅οΈββοΈ Russia's APT29 Mimics AWS to Steal Windows Credentials π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Kremlin intelligence carried out a widescale phishing campaign in contrast to its usual, more targeted operations.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Darkreading
Russia's APT29 Mimics AWS to Steal Windows Credentials
Kremlin intelligence carried out a wide-scale phishing campaign in contrast to its usual, more targeted operations.
π΅οΈββοΈ SEC Fines Companies Millions for Downplaying SolarWinds Breach π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Four companies Avaya, Check Point, Mimecast, and Unisys have been charged by the SEC for misleading disclosures in the aftermath of the 2020 SolarWinds compromise.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Darkreading
SolarWinds Breach Victims Fined for Vague Reporting
Four companies β Avaya, Check Point, Mimecast, and Unisys β have been charged by the SEC for misleading disclosures in the aftermath of the 2020 SolarWinds compromise.
π΅οΈββοΈ UnitedHealth Reveals 100M Compromised in Change Healthcare Breach π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Eight months after the breach occurred, Change Healthcare has finally sent out millions of notices of compromised data to affected individuals.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Darkreading
100M Compromised in Change Healthcare Breach
Eight months after the breach occurred, Change Healthcare has finally sent out millions of notices of compromised data to affected individuals.
π¦Ώ Change Healthcare Cyberattack Exposed Data of Over 100 Million People π¦Ώ
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
Nearly onethird of Americans may have been affected by the ransomware attack, which has been attributed to the BlackCat gang.π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
TechRepublic
Change Healthcare Cyberattack Exposed Data of Over 100 Million People
Personal information from one-third of Americans could have been affected in the $22 million ransomware attack.
πͺ Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024 πͺ
π Read more.
π Via "NIST"
----------
ποΈ Seen on @cibsecurity
This blog is part of a larger NIST series during the month of October for Cybersecurity Awareness Month , called 'Staff Stories Spotlight.' Throughout the month of October this year, QA style blogs will be published featuring some of our unique staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity. This years Cybersecurity Awareness Month theme is Secure our World. How does this theme resonate with you, as someone working in cybersecurity? The theme 'Secure our World' resonates deeply with me, as it emphasizes our collective.π Read more.
π Via "NIST"
----------
ποΈ Seen on @cibsecurity
NIST
Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024
This blog is part of a larger NIST series during the month of October for
ποΈ CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
The Computer Emergency Response Team of Ukraine CERTUA has detailed a new malicious email campaign targeting government agencies, enterprises, and military entities. "The messages exploit the appeal of integrating popular services like Amazon or Microsoft and implementing a zerotrust architecture," CERTUA said. "These emails contain attachments in the form of Remote Desktop Protocol '.rdp'.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
The infamous cryptojacking group known as TeamTNT appears to be readying for a new largescale campaign targeting cloudnative environments for mining cryptocurrencies and renting out breached servers to thirdparties. "The group is currently targeting exposed Docker daemons to deploy Sliver malware, a cyber worm, and cryptominers, using compromised servers and Docker Hub as the infrastructure.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π3
ποΈ Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Four members of the nowdefunct REvil ransomware operation have been sentenced to several years in prison in Russia, marking one of the rare instances where cybercriminals from the country have been convicted of hacking and money laundering charges. Russian news publication Kommersant reported that a court in St. Petersburg found Artem Zaets, Alexei Malozemov, Daniil Puzyrevsky, and Ruslan.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π4
π½ U.S. Citizensβ Data Allegedly on Sale π½
π Read more.
π Via "BE3SEC"
----------
ποΈ Seen on @cibsecurity
A threat actor claimed that they have and are selling 280 million U.S. citizens personal data on dark web. According to the post of the threat actor, the data includes FirstNameLastName AddressCityStateZIP IndDateOfBirthYearIndAge HomeValueCodeHomeMedianValueCodeMedianIncomeCode EmailPhone They are also claiming that they can provide sample data to the prospects. Meanwhile, they.π Read more.
π Via "BE3SEC"
----------
ποΈ Seen on @cibsecurity
be4sec
U.S. Citizensβ Data Allegedly on Sale
A threat actor claimed that they have and are selling 280 million U.S. citizensβ personal data on dark web. According to the post of the threat actor, the data includes; First_NameγLast_Name β¦
π5β€1
ποΈ Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
A new attack technique could be used to bypass Microsoft's Driver Signature Enforcement DSE on fully patched Windows systems, leading to operating system OS downgrade attacks. "This bypass allows loading unsigned kernel drivers, enabling attackers to deploy custom rootkits that can neutralize security controls, hide processes and network activity, maintain stealth, and much more," SafeBreach.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π’ The National Public Data breach exposed nearly three billion users β now the company has filed for bankruptcy π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
National Public Datas decline after a devastating cyber attack took roughly six months, as it failed to stay afloat amid mounting recovery costs.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
ITPro
The National Public Data breach exposed 270 million users β now the company has filed for bankruptcy
National Public Dataβs decline after a devastating cyber attack took roughly six months, as it failed to stay afloat amid mounting recovery costs
π’ LinkedIn fined β¬310 million for GDPR breaches π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
The social networking platform has accepted the ruling and will implement changes to its ad tracking processes.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
ITPro
LinkedIn fined β¬310 million for GDPR breaches
The social networking platform has accepted the ruling and will implement changes to its ad tracking processes
π¦Ώ Is Firefox Password Manager Secure? π¦Ώ
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
Like other password managers, there are risks and drawbacks to consider before trusting Firefox Password Manager with your credentials.π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
TechRepublic
Is Firefox Password Manager Secure?
Like other password managers, there are risks and drawbacks to consider before trusting Firefox Password Manager with your credentials.
π¦Ώ Hiring Kit: Computer Forensic Analyst π¦Ώ
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
The increasing emphasis on securing sensitive data by regulatory agencies and governments worldwide has opened job opportunities beyond criminal justice for capable individuals with proficient technical skills, inquisitive analytical mindsets, and the tenacious drive to solve seemingly intractable problems. This customizable hiring kit, written by Mark W. Kaelin for TechRepublic Premium, provides a framework you ...π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
TechRepublic
Hiring Kit: Computer Forensic Analyst | TechRepublic
The increasing emphasis on securing sensitive data by regulatory agencies and governments worldwide has opened job opportunities beyond criminal justice
ποΈ THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 - Oct 27) ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Cybersecurity news can sometimes feel like a neverending horror movie, can't it? Just when you think the villains are locked up, a new threat emerges from the shadows. This week is no exception, with tales of exploited flaws, international espionage, and AI shenanigans that could make your head spin. But don't worry, we're here to break it all down in plain English and arm you with the.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity