🖋️ Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Threat actors have been observed concealing malicious code in images to deliver malware such as VIP Keylogger and 0bj3ctivity Stealer as part of separate campaigns. "In both campaigns, attackers hid malicious code in images they uploaded to archive.org, a filehosting website, and used the same .NET loader to install their final payloads," HP Wolf Security said in its Threat Insights Report.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 DORA Compliance Costs Soar Past €1m for Many UK and EU Businesses 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Compliance with the Digital Operational Resilience Act DORA has cost many businesses over 1 million, according to research from Rubrik.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
DORA Compliance Costs Soar Past €1m for Many UK and EU Businesses
Compliance with the Digital Operational Resilience Act (DORA) has cost many businesses over €1 million, according to research from Rubrik
📔 New Hacking Group Leaks Configuration of 15,000 Fortinet Firewalls 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The leak likely comes from a zeroday exploit affecting Fortinets products.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
New Hacking Group Leaks Configuration of 15,000 Fortinet Firewalls
The leak likely comes from a zero-day exploit affecting Fortinet’s products
📔 GoDaddy Accused of Serious Security Failings by FTC 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
A proposed settlement order from the FTC will require GoDaddy to strengthen its security practices following multiple data breaches at the web hosting giant.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
GoDaddy Accused of Serious Security Failings by FTC
A proposed settlement order from the FTC will require GoDaddy to strengthen its security practices following multiple data breaches at the web hosting giant
📔 Hackers Use Image-Based Malware and GenAI to Evade Email Security 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
HP Wolf highlighted novel techniques used by attackers to bypass email protections, including embedding malicious code inside images and utilizing GenAI.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Hackers Use Image-Based Malware and GenAI to Evade Email Security
HP Wolf highlighted novel techniques used by attackers to bypass email protections, including embedding malicious code inside images and utilizing GenAI
🦅 Government Sector Bears the Brunt of Cyberattacks in Ukraine: Report 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Overview Ukraine's fight against cyberthreats has reached new heights, with its top cybersecurity agency releasing the 2024 annual cyberthreat landscape report detailing its efforts to protect critical infrastructure and government systems. The report, prepared by the State Cyber Defense Center under the State Service for Special Communications and Information Protection, outlines key findings, incident statistics, and strategies employed to counteract persistent cyber threats. Key Findings Ukraine processed a staggering 3 million security events in 2024, a reflection of the heightened activity in its cyber domain. Of these, over 1,000 incidents were confirmed as direct cyberthreats. The year saw a surge in advanced persistent threats APTs and statesponsored cyber esp...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Ukraine’s Cyberthreat Landscape 2024
Explore Ukraine’s 2024 cyberthreat landscape, uncovering government sector espionage, persistence, and operational disruption risks.
🦅 ICS Vulnerability Report: Hitachi Energy Network Management Flaw Scores a Perfect 10 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Overview Critical vulnerabilities in Hitachi Energy UNEM Network Management Systems were among the highlights in Cybles weekly Industrial Control System ICS Vulnerability Intelligence Report, which also examined flaws in products from Delta Electronics, Schneider Electric and other ICS vendors. Cyble Research Intelligence Labs CRIL examined 16 vulnerabilities in the report for clients half of which affect Hitachi Energy FOXMANUN products based on ICS alerts by the Cybersecurity and Infrastructure Security Agency CISA between January 814. Of the 16 vulnerabilities, two are critical, nine are high severity, and five are medium severity. They span Communication, Critical Manufacturing, Chemical, Energy, Wastewater Systems and Commercial Facilities, and could lead to operation...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Strategic Approaches to Threat Detection, Investigation & Response 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
By staying vigilant, agile, and prepared, organizations can turn TDIR from a defensive strategy into a proactive enabler of security and operational excellence.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Strategic Approaches to TDIR
By staying vigilant, agile, and prepared, organizations can turn threat detection, investigation, and response from a defensive strategy into a proactive enabler of security and operational excellence.
📔 Middle Eastern Real Estate Fraud Grows with Online Listings 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Middle East real estate scams are surging as fraudsters exploit online listings and bypassed due diligence checks.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Middle Eastern Real Estate Fraud Grows with Online Listings
Middle East real estate scams are surging as fraudsters exploit online listings and bypassed due diligence checks
📔 Trump’s Truth Social Users Targeted by Rampant Scams Online 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Truth Social, launched by the Trump Media Technology Group in 2022, has become a hotspot for scams like phishing and investment fraud.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Trump’s Truth Social Users Targeted by Rampant Scams Online
Truth Social, launched by the Trump Media & Technology Group in 2022, has become a hotspot for scams like phishing and investment fraud
📔 Biden Tightens Software Supply Chain Security Requirements Ahead of Trump Takeover 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The US Presidents second cybersecurity Executive Order will impose stricter security standards on software providers.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Biden Tightens Software Supply Chain Security Requirements Ahead of Trump Takeover
The US President’s second cybersecurity Executive Order will impose stricter security standards on software providers
🖋️ Russian Star Blizzard Shifts Tactics to Exploit WhatsApp QR Codes for Credential Harvesting 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The Russian threat actor known as Star Blizzard has been linked to a new spearphishing campaign that targets victims' WhatsApp accounts, signaling a departure from its longstanding tradecraft in a likely attempt to evade detection. "Star Blizzard's targets are most commonly related to government or diplomacy both incumbent and former position holders, defense policy or international relations.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Biden's Cybersecurity EO Leaves Trump a Comprehensive Blueprint for Defense 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
New order mandates securing the federal software supply chain and communications networks, as well as deploying AI tools to protect critical infrastructure from cyberattacks but will the Trump administration follow through?.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
Biden's Cyber EO Gives Trump a Blueprint for Defense
New order mandates securing the federal software supply chain, communications networks, as well as deploying AI tools to protect critical infrastructure from cyberattacks — but will the Trump administration follow through?
🕵️♂️ FTC Orders GoDaddy to Fix Inadequate Security Practices 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The FTC claims that the Web hosting company's security failures led to several major breaches in the past few years.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
FTC Orders GoDaddy to Fix Inadequate Security Practices
The FTC claims that the Web hosting company's security failures led to several major breaches in the past few years.
♟️ Chinese Innovations Spawn Wave of Toll Phishing Via SMS ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Residents across the United States are being inundated with text messages purporting to come from toll road operators like EZPass, warning that recipients face fines if a delinquent toll fee remains unpaid. Researchers say the surge in SMS spam coincides with new features added to a popular commercial phishing kit sold in China that makes it simple to set up convincing lures spoofing toll road operators in multiple U.S. states.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
Chinese Innovations Spawn Wave of Toll Phishing Via SMS
Residents across the United States are being inundated with text messages purporting to come from toll road operators like E-ZPass, warning that recipients face fines if a delinquent toll fee remains unpaid. Researchers say the surge in SMS spam coincides…
🕵️♂️ Russian APT Phishes Kazakh Gov't for Strategic Intel 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
A highly targeted cyberintelligence campaign adds fuel to the increasingly complex relationship between the two former Soviet states.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
Russian APT Phishes Kazakh Gov't for Strategic Intel
A highly targeted cyber-intelligence campaign adds fuel to the increasingly complex relationship between the two former Soviet states.
🖋️ European Privacy Group Sues TikTok and AliExpress for Illicit Data Transfers to China 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Austrian privacy nonprofit None of Your Business noyb has filed complaints accusing companies like TikTok, AliExpress, SHEIN, Temu, WeChat, and Xiaomi of violating data protection regulations in the European Union by unlawfully transferring users' data to China. The advocacy group is seeking an immediate suspension of such transfers, stating the companies in question cannot shield user data.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
👍2
📔 Noyb Files GDPR Complaints Against TikTok and Five Chinese Tech Giants 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
AliExpress, Shein, Temu, TikTok, WeChat and Xiaomi are accused of operating unlawful data transfers to China.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Noyb Files GDPR Complaints Against TikTok and Five Chinese Tech Giants
AliExpress, Shein, Temu, TikTok, WeChat and Xiaomi are accused of operating unlawful data transfers to China
📔 DORA Takes Effect: Financial Firms Still Navigating Compliance Headwinds 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The EUs DORA regulation is in effect as of January 17, with mixed evidence around compliance levels among financial firms.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
DORA Takes Effect: Financial Firms Still Navigating Compliance Headwinds
The EU’s DORA regulation is in effect as of January 17, with mixed evidence around compliance levels among financial firms
🦅 Sliver Implant Targets German Entities with DLL Sideloading and Proxying Techniques 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Key Takeaways Cyble Research and Intelligence Labs CRIL has identified an ongoing cyberattack targeting organizations in Germany. The attack is initiated through a deceptive LNK file embedded within an archive. When executed by an unsuspecting user, this LNK file triggers cmd.exe to copy and run wksprt.exe, a legitimate executable. This executable sideloads a malicious DLL that employs DLL proxying, ensuring the host application continues to operate seamlessly while executing malicious shellcode in the background. The shellcode ultimately decrypts and executes the final payload Sliver, a wellknown opensource Red Teamadversary emulation framework. Once deployed, Sliver functions as an implant, enabling threat actors to establish communication with the compromised system and...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Sliver Implant Targets German Entities With DLL Sideloading
Learn how the Sliver implant uses DLL sideloading and proxying to target German entities. Explore the latest cyber threat techniques and defense strategies
🦅 AI Takes the Center Stage in Biden’s Landmark Cybersecurity Order 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Overview Outgoing U.S. President Joe Biden issued an order yesterday outlining measures to improve government cybersecurity. The lengthy order includes suggestions to improve cloud and software security by building requirements into the federal acquisition process. It also orders federal agencies to adopt a number of cybersecurity technologies and practices and takes a forwardthinking approach to AI. As the culmination of efforts that began nearly four years ago in response to the Colonial Pipeline ransomware attack, the order is also valuable as a lessons learned document from an Administration that has had much to deal with in four years of dramatic cybersecurity events. Cloud, Software Security Goals Bidens final cybersecurity plan is also ambitious in its implementatio...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity