Trend Micro
We detail the modular framework of malicious Chrome extensions that consist of various highly obfuscated components that leverage Google Chrome API to monitor, intercept, and exfiltrate victim data.
Bleeping Computer
Healthcare SaaS provider Welltok is warning that a data breach exposed the personal data of nearly 8.5 million patients in the U.S. after a file transfer program used by the company was hacked in a data theft attack.
Infosecurity News
Kaspersky said the figure closely rivals the 20% attributed to external hacking attempts
SecurityWeek
OpenAI reached an agreement for Sam Altman to return to OpenAI as CEO with a new initial board of directors, after he was fired a week prior.
Trend Micro
The Trend Micro Managed XDR team encountered malicious operations that used techniques similar to the ones used by Genesis Market, a website for facilitating fraud that was taken down in April 2023.
Trend Micro
Dive into the world of private 5G networks and learn about a critical security vulnerability that could expose IoT devices to attacks from external networks.
Infosecurity News
Millions of consumers’ PII could be at risk due to exploitable vulnerabilities and a lack of basic security protocols in e-commerce web apps
Ars Technica
Ilya Sutskever announces regret; 505 OpenAI employees sign letter asking board to resign.
The Hacker News
Silverfort's Unified Identity Protection Platform: A game-changer in cybersecurity. Discover how it protects organizations from identity-based attacks
Trend Micro
We uncovered the active exploitation of the Apache ActiveMQ vulnerability CVE-2023-46604 to download and infect Linux systems with the Kinsing malware (also known as h2miner) and cryptocurrency miner.
The Record
The British Library — one of the largest libraries in the world and the national library of the United Kingdom — said the ransomware gang behind a recent attack on its systems appeared to leak data stolen from its human resources files.
Ars Technica
After Altman firing, Microsoft has "utmost confidence" in partner OpenAI.
Trend Micro
Learn more about ALPHV filing a complaint with the Security and Exchange Commission (SEC) against their victim, which appears to be an attempt to influence MeridianLink to pay the ransom sooner than later.
The Record
The latest data released by the Information Commissioner’s Office (ICO) includes an attack that breached data on the sex lives of up to 10,000 people, from an unspecific government department.
Ars Technica
AI image synthesis is getting more capable at executing ideas, and it's not slowing down.
Bleeping Computer
The WordPress plugin WP Fastest Cache is vulnerable to an SQL injection vulnerability that could allow unauthenticated attackers to read the contents of the site's database.
SecurityWeek
Zip Security raised $7.7 million in funding led by General Catalyst, co-led by Human Capital, and with participation from Box Group.
Cyber Security News
McLaren Health Care was hacked 2.2 million individual data were breached after the attack of 6TB of Patient records in August.
Trend Micro
This blog entry explores the effectiveness of ChatGPT's safety measures, the potential for AI technologies to be misused by criminal actors, and the limitations of current AI models.
Cyber Security News
Best Free Digital Forensic Tools: 1. Sleuth Kit (+Autopsy) 2. Forensic Investigator 3.Autopsy 4. Dumpzilla 5. X-Ways Forensics.
Trend Micro
We encountered the Cerber ransomware exploiting the Atlassian Confluence vulnerability CVE-2023-22518 in its operations.
The Record
The Click Here podcast team reports on wartime technological improvisations: An activist unexpectedly leads an effort to identify the missing and the dead. And an English teacher finds a way to connect mobile phones as infrastructure collapses.
CyberNews
Threat actors are using malicious QR codes to steal valuable data and money. Experts say it’s still difficult to detect and mitigate the threats spread by this method.
Cyber Security News
Top Incident Response Plans : 1. Preparation 2. Identification 3. Containment 4. Eradication 5. Recovery 6. Lessons learned.
Trend Micro
We analyzed a phishing campaign involving malicious emails containing a link to a file-sharing solution, which further leads to a PDF document with a secondary link designed to steal login info and session cookies.
CyberSecurity Dive
The SEC final rule requires public companies to disclose any material cybersecurity incidents within four business days of determination.
-1.webp)
Cyber Security News
Recently, security experts of Okta itself have confirmed that nearly 5,000 of its employees were affected by a third-party data breach.
Bleeping Computer
Password reuse is a difficult vulnerability for IT teams to get full visibility over. Learn more from Specops Software on how to mitigate the risk of compromised credentials.
Infosecurity News
Analyst warns that risks of using the technology will become apparent
Bleeping Computer
LayerX has developed a secure enterprise browser extension that delivers comprehensive visibility, monitoring, and granular policy enforcement on every event within a browsing session. Learn more about this cybersecurity platform from LayerxSecurity.
The Record
Doctors’ Management Services — which provides medical billing and payer credentialing services — was attacked by the now-defunct GandCrab ransomware gang in April 2017. The settlement with HHS is the first for the agency over a ransomware attack.
DarkReading
Cybercriminals are upping their phishing with shortened links and showing that coveted, regulated top-level domains aren't as exclusive as you'd think.
Ars Technica
By some estimates, 20,000 devices have already been hacked.
Trend Micro
This report explores the Kopeechka service and gives a detailed technical analysis of the service’s features and capabilities and how it can help cybercriminals to achieve their goals.
The Record
The European Union’s recent warnings to social media platforms asserting that they are in violation of the newly-enacted law meant to rein in disinformation and other online abuses are poorly executed and come before the commission is prepared to enforce them, experts and advocates say.
CyberSecurity Dive
Exploits of the HTTP/2 Rapid Reset vulnerability led to record-breaking attacks as global threat activity continued into October.
The Record
On a recent trip to Ukraine, Click Here spoke with Ukraine's Alex Bornyakov about the country's booming drone sector and the Brave1 initiative, which aims to get innovative weapons into the hands of soldiers in a matter of weeks, not months.
Bleeping Computer
Ransomware incidents continue to grow at an alarming pace, targeting the enterprise and governments worldwide. Learn more from Specops Software on how ransomware gangs gain initial access to networks and how to protect against attacks.
Infosecurity News
APP fraud remains a major challenge for UK banking sector
Bleeping Computer
Ransomware activity in September reached unprecedented levels following a relative lull in August that was still way above regular standards for summer months.
The Hacker News
Discover how threat actors modified a backdoor on Cisco devices using zero-day flaws in IOS XE software, evading detection with new techniques.
The Record
Alvaro Bedoya, a commissioner at the Federal Trade Commission (FTC), is known for his expertise in digital privacy — a skill which is serving him well now, as the commission works to better understand the effects of social media, particularly on children.
Bleeping Computer
More than 40,000 Cisco devices running the IOS XE operating system have been compromised after hackers exploited a recently disclosed maximum severity vulnerability tracked as CVE-2023-20198.
Trend Micro
In the second part of this series, we will examine how attackers can trigger vulnerabilities by sending control messages masquerading as user traffic to cross over from user plane to control plane.
Ars Technica
New technique produces lots of bitflips and could one day help form an attack.
Ars Technica
Google-verified advertiser + legit-looking URL + valid TLS cert = convincing look-alike.
Cyber Security News
Best Unified Network Security Solutions for Small Businesses. 1. Perimeter 81, 2. Snort, 3. OSSEC, 4. Wireshark, 5. Burp Suite, 6. Splunk.
Ars Technica
This troubling ability could be used by scammers or to target ads.
Ars Technica
An unknown threat actor is exploiting the vulnerability to create admin accounts.
Trend Micro
This blog discusses how threat actors abuse Discord’s content delivery network (CDN) to host and spread Lumma Stealer, and talks about added capabilities to the information stealing malware.
Trend Micro
Almost a year after Void Rabisu shifted its targeting from opportunistic ransomware attacks with an emphasis on cyberespionage, the threat actor is still developing its main malware, the ROMCOM backdoor.
Trend Micro
We detail an ongoing campaign abusing messaging platforms Skype and Teams to distribute the DarkGate malware to targeted organizations. We also discovered that once DarkGate is installed on the victim’s system, additional payloads were introduced to the environment.
The Record
The Click Here podcast team goes inside Ukraine’s military drone industry, where entrepreneurs are putting innovative weapons into the hands of soldiers in a matter of weeks, not months.
Ars Technica
Microsoft loses around $20 per user per month on GitHub Copilot, according to the WSJ.
DarkReading
An unprecedented collaboration by various APTs within the DPKR makes them harder to track, setting the stage for aggressive, complex cyberattacks that demand strategic response efforts, Mandiant warns.
Bleeping Computer
Hackers are conducting a large-scale campaign to exploit the recent CVE-2023-3519 flaw in Citrix NetScaler Gateways to steal user credentials.
Infosecurity News
Social media is number one channel for fraud, says FTC
Bleeping Computer
The Federal Trade Commission says Americans have lost at least $2.7 billion to social media scams since 2021, with the real number likely many times larger due to unreported incidents.
Ars Technica
Broken guardrails for AI systems lead to push for new safety measures .
Trend Micro
Digitalization has changed the business environment of the electric power industry, exposing it to various threats. This webinar will help you uncover previously unnoticed threats and develop countermeasures and solutions.
DarkReading
A campaign that's been active since April has already racked up nearly 75,000 downloads, stealing data and cryptocurrency in the process.
Cyber Security News
Beginning in April 2023, an unidentified attacker pounded the Python environment with dozens of closely related malicious packages.
Trend Micro
This entry delves into threat actors' intricate methods to implant malicious payloads within seemingly legitimate applications and codebases.
SecurityWeek
The Zero Day Initiative (ZDI) will host a new Automotive Pwn2Own at the Automotive World Conference in Tokyo, January 24 to 26, 2024.
DarkReading
Thousands of messages are being sent weekly in a campaign that uses links hosted on legitimate websites to evade natural language processing and URL-scanning email protections.
Ars Technica
Adding fake watermarks to real images, evading current watermarking methods is not hard.
The Record
One flaw is in open source code known as "libvpx," which is involved with handling media such as images. The other issue is with software known as WS_FTP.
.webp)
Cyber Security News
IoT - the global phenomenon which has taken the world by storm in 2023 was first coined in 1999 by Kevin Ashton.
Trend Micro
We observed and tracked the advanced persistent threat (APT) APT34 group with a new malware variant accompanying a phishing attack comparatively similar to the SideTwist backdoor malware. Following the campaign, the group abused a fake license registration form of an African government agency to target a victim in Saudi Arabia.
The Record
On Thursday, CNN reported on an an internal memo from the U.S. Department of Homeland Security raising alarm about the incident and warning that the attack on Johnson Controls may have “compromised sensitive physical security information such as DHS floor plans.”
DarkReading
It's important to know the difference between the two terms. Here's why.
SecurityWeek
CISO churn is a threat, as security initiatives can take longer than the residency of a CISO, and constant churn can leave gaps in security.
The Hacker News
Dive into the world of cyber threats with our Network Effect Threat Report. Learn about multi-customer attacks and which industries are most targeted.
Computerworld
Having a plan in place before deploying genAI for software product development and employee assistance tools is critical, says Navan CSO Prabhath Karanth. Otherwise, the threat potential is high.
Infosecurity News
Experts at the mWISE conference discussed who is behind the surge in zero-day exploits
Trend Micro
We examine the campaigns of the cyberespionage group known as Turla over the years, with a special focus on the key MITRE techniques and the corresponding IDs associated with the threat actor group.
Trend Micro
This blog entry details a scheme that exploits the recent Morocco earthquake by impersonating the domain name of a well-known humanitarian organization for financial fraud.
Bleeping Computer
Data breaches and their investigations are becoming extremely costly for the enterprise. Learn from Outpost24 below about what your business can do to reduce these costs.
Trend Micro
Crafted packets from cellular devices such as mobile phones can exploit faulty state machines in the 5G core to attack cellular infrastructure. Smart devices that critical industries such as defense, utilities, and the medical sectors use for their daily operations depend on the speed, efficiency, and productivity brought by 5G. This entry describes CVE-2021-45462 as a potential use case to deploy a denial-of-service (DoS) attack to private 5G networks.
Trend Micro
While monitoring Earth Lusca, we discovered an intriguing, encrypted file on the threat actor's server — a Linux-based malware, which appears to originate from the open-source Windows backdoor Trochilus, which we've dubbed SprySOCKS due to its swift behavior and SOCKS implementation.
The Record
After the news that the prominent media figure Galina Timchenko was hacked with Pegasus, three other Russian-speaking journalists said they too received warnings of spyware on their phones.
Infosecurity News
But IBM warns credential compromise is number one initial access vector
The Record
Without specifying what such a system would look like or how it would behave, members of the Cybersecurity Advisory Committee said the federal government should work toward "the 24/7 consideration and provisioning of cyber alerts."
Bleeping Computer
Global cryptocurrency exchange CoinEX announced that someone hacked its hot wallets and stole large amounts of digital assets that were used to support the platform's operations.
Bleeping Computer
Training end-users to spot phishing has its benefits, but it's clear to see organizations as a whole have failed to make a dent in phishing attacks. Learn more from Specops Software on how phishers use social engineering to exploit human psychology.
Trend Micro
In this blog, we investigate how threat actors used information-stealing malware with EV code signing certificates and later delivered ransomware payloads to its victims via the same delivery method.
The Record
Rep. Andrew Garbarino, chairman of a House cybersecurity subcommittee, says it's "scary" that the Biden administration won't produce a "COTE" plan specifically for a cyberattack. The White House argues that such plans already exist elsewhere.
The Record
The takedown of the Hansa market showed how old-school policing can play a role in cybercrime cases. The Click Here podcast team talks with the head of the Netherlands’ High Tech Crimes Unit about the legacy of that operation.
The Record
Numbers from a forgotten British government database reveal the persistent rise of ransomware.
Bleeping Computer
A new attack dubbed 'WiKI-Eve' can intercept the cleartext transmissions of smartphones connected to modern WiFi routers and deduce individual numeric keystrokes at an accuracy rate of up to 90%, allowing numerical passwords to be stolen.
SecurityWeek
A militia in Myanmar arrested and repatriated more than 1,200 Chinese nationals allegedly involved in criminal online scam operations.
The Record
The prank of choice among the young cyber set is swatting: calling in a hoax report that sends police, guns drawn, to the dwelling of an unsuspecting victim. The Click Here podcast team talks with an expert about what can be done to track and deter swatting.
The Hacker News
vCISO landscape is booming, with an 86% expected increase by 2024. Dive into the reasons behind this surge in virtual Chief Information Security
Bleeping Computer
Cybersecurity has become a crucial concern for all businesses in today's digital era. Learn from Wazuh on how small and medium-sized enterprises can use its open-source solution to improve their cybersecurity.
Infosecurity News
Their global peers feel the opposite, according to Proofpoint study
Computerworld
In addition to controlling the use of ChatGPT and other standalone tools, companies now have to grapple with generative AI being built into the productivity apps their employees use every day.
Trend Micro
We analyze an information stealer written in Node.js, packaged into an executable, exfiltrated stolen data via both Telegram bot API and a C&C server, and employed GraphQL as a channel for C&C communication.
Trend Micro
In this entry, we summarize the security analyses and investigations done on phishing-as-a-service 16shop through the years. We also outline the partnership between Trend Micro and Interpol in taking down the main administrators and servers of this massive phishing campaign.
CyberSecurity Dive
CEO George Kurtz said the company will consider potential acquisition targets as M&A discussions heat up across the industry.
The Record
Britain’s National Cyber Security Centre (NCSC) has hired Ollie Whitehouse as the agency’s first Chief Technology Officer.
Ars Technica
Before linking an account, be sure the app you're using is legit.
Bleeping Computer
Trojanized Signal and Telegram apps containing the BadBazaar spyware were uploaded onto Google Play and Samsung Galaxy Store by a Chinese APT hacking group known as GREF.
Trend Micro
We break down a new cyberespionage campaign deployed by a cybercriminal group we named Earth Estries. Analyzing the tactics, techniques, and procedures (TTPs) employed, we observed overlaps with the advanced persistent threat (APT) group FamousSparrow as Earth Estries targets governments and organizations in the technology sector.
The Record
Dustin Childs, the head of threat awareness for the Zero Day Initiative, explains to the Click Here podcast team how zero-day vulnerabilities make it into the hands of cybercriminals.
Trend Micro
The Trend Micro Mobile Application Reputation Service (MARS) team discovered a new, fully undetected Android banking trojan, dubbed MMRat, that has been targeting mobile users in Southeast Asia since late June 2023.
The Record
The government of Gabon has shut down internet access nationwide in the midst of national elections.
Security Affairs
Experts observed the SmokeLoader malware delivering a new Wi-Fi scanning malware strain dubbed Whiffy Recon. Secureworks Counter Threat Unit (CTU) researchers observed the Smoke Loader botnet dropping a new Wi-Fi scanning malware named Whiffy Recon. The malicious code triangulates the positions of the infected systems using nearby Wi-Fi access points as a data point for Google’s […]
CyberSecurity Dive
Understanding model limitations and keeping humans in the loop is critical to productive adoption of AI, according to several software leaders.
Naked Security
Latest episode – listen now! Full transcript inside…
Bleeping Computer
Cybercriminals behind the Smoke Loader botnet are using a new piece of malware called Whiffy Recon to triangulate the location of infected devices through WiFi scanning and Google's geolocation API.
CyberSecurity Dive
CISOs need to address the structure, management and curation of data as they pursue benefits from generative AI, according to an IDC report.
Trend Micro
Learn the common OT and IT visibility and efficiency barriers, as well as how to get around them.
Ars Technica
Vulnerability allows hackers to execute malicious code when targets open malicious ZIP files.
Trend Micro
In this entry, we discuss how a threat actor abuses paid Facebook promotions featuring LLMs to spread malicious code, with the goal of installing a malicious browser add-on and stealing victims’ credentials.
CyberSecurity Dive
The financially-motivated threat actor was responsible for one-third of all ransomware attacks in July, according to NCC Group and Flashpoint.
The Record
Millions of dollars worth of cryptocurrency were stolen from two cryptocurrency platforms over the last few days, with both being forced to pause their operations and warn customers of potential losses.
CSO
Organizations increasingly willing to pay ransoms to recover from attacks while rising stress levels are forcing security workers to consider quitting.
The Record
A bar association representing German lawyers nationwide is investigating a ransomware attack on its office in Brussels.
Computerworld
Researchers built a proof-of-concept attack that tricks victims into thinking they are using Airplane Mode while attackers continue to gain network access.
Security Affairs
Experts warn of ongoing attacks, dubbed Xurum, targeting e-commerce websites using Adobe’s Magento 2 CMS. Akamai researchers warn of ongoing attacks, dubbed Xurum, targeting e-commerce websites running the Magento 2 CMS. The attackers are actively exploiting a server-side template injection issue, tracked as CVE-2022-24086, (CVSS score: 9.8), in Adobe Commerce and Magento Open Source. The […]
Computerworld
UC-Berkeley researchers found that hand and head motion data could be as good as fingerprints and facial scans at identifying users, raising a host of privacy concerns as headset adoption grows.
SecurityWeek
Current AI models are simply too unwieldy, brittle and malleable, academic and corporate research shows.
Trend Micro
The Monti ransomware collective has restarted their operations, focusing on institutions in the legal and governmental fields. Simultaneously, a new variant of Monti, based on the Linux platform, has surfaced, demonstrating notable differences from its previous Linux-based versions.
The Record
Cybersecurity researchers at the DefCon security conference disclosed details this weekend on three vulnerabilities in popular transportation software that could allow people to obtain free public transit rides.
CyberSecurity Dive
The acting national cyber director, armed with more talent at the federal level and an implementation plan, is striving for lasting impact.
The Hacker News
Russian threat actors suspected in cyber attack on South African power company using a new variant of the SystemBC malware called DroxiDat
The Record
The White House and a handful of government agencies on Thursday called for experts to help them create policies around the cybersecurity of open source software and promote the use of more security programming languages.
Naked Security
Latest episode – listen now! (Full transcript inside.)
The Hacker News
Threat actors are utilizing the 'EvilProxy' Phishing-as-a-Service (PhaaS) toolkit to carry out account takeovers.
CyberScoop
Russian hackers have become increasingly focused on intelligence gathering to gain advantage on the battlefield.
The Record
Illia Vitiuk, head of cybersecurity at the Security Service of Ukraine (SBU), said that hackers have been getting into Russian systems to find out the Kremlin’s targets, how the enemy’s troops move, and more.
Naked Security
74 CVEs, and two “Exploitation Detected” advisories, which are nearly but not quite the same as 0-days. Also, two potential Teams treacheries that you really want to fix.
Trend Micro
In this blog entry, we will provide details on Rhysida, including its targets and what we know about its infection chain.
Naked Security
Fast, quiet, smooth, consistent and low impact… why true hacker-grade touch-typing might keep you more secure.
Computerworld
Researchers have identified a frightening exploit that means attackers might be able to figure out what you type on your Mac — based on the sound of keyboard taps.
The Record
According to the country's Electoral Commission, the hackers first accessed its internal systems in August 2021 and were not discovered until October 2022.
Trend Micro
In June 2023, Trend Micro observed an upgrade to the evasion techniques used by the Batloader initial access malware, which we’ve covered in previous blog entries.
Trend Micro
In this entry, we detail our analysis of how the TargetCompany ransomware abused an iteration of fully undetectable (FUD) obfuscator engine BatCloak to infect vulnerable systems.
Ars Technica
Despite help from neural networks, it requires more human work than you might think.
Naked Security
Serious security stories explained clearly in plain English – listen now. (Full transcript available.)
Infosecurity News
Zero-day exploit warning was issued a week ago
Naked Security
It’s a real vulnerability, but the data leakage rate can be as low as… let’s just say that an IMAX-quality copy of the new “Oppenheimer” movie could take you 4 billion…
CyberScoop
Cybersecurity veteran Amit Yoran says Microsoft has a culture of toxic obfuscation when it comes to addressing security threats.
Bleeping Computer
Hackers exploited a zero-day vulnerability in Salesforce's email services and SMTP servers to launch a sophisticated phishing campaign targeting valuable Facebook accounts.
Ars Technica
Adversarial attack involves using text strings and may be unstoppable.
Naked Security
No zero-days, but some interesting patches with their very own “teachable moments”.
The Record
Nikita Kislitsin was detained in Kazakhstan earlier in June at the request of the U.S., but authorities there are waiting for a court decision on his potential extradition to Russia.
Trend Micro
Trend Micro’s Mobile Application Reputation Service (MARS) team discovered two new related Android malware families involved in cryptocurrency-mining and financially-motivated scam campaigns targeting Android users.
Cyber Security News
The ecommerce industry is on the rise. According to Statista, global e-commerce sales amounted to approximately $5.2 trillion. Moreover, experts predict this figure to reach about $8.1 trillion by 2026, growing by 56% in the coming years. However, such rapid growth inevitably comes with various challenges, and ensuring ecommerce security is one of them. Statistics […]
SecurityWeek
SecurityWeek interviews Field CISOs, Fawaz Rasheed (VMware Carbon Black) and Nabil Hannan (NetSPI), about the emerging cybersecurity role.
Infosecurity News
Attackers could covertly gain remote control of devices
Security Affairs
Experts warn of a severe privilege escalation, tracked as CVE-2023-30799, in MikroTik RouterOS that can be exploited to hack vulnerable devices. VulnCheck researchers warn of a critical vulnerability, tracked as CVE-2023-30799 (CVSS score: 9.1), that can be exploited in large-scale attacks to target over 500,000 RouterOS systems. “MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are […]
The Hacker News
Critical Privilege Escalation Vulnerability in MikroTik RouterOS Poses a Severe Threat to Over Half a Million Devices
Infosecurity News
A new report shows that 50% of all UK businesses have a basic cyber security skills gap, and 33% have an advanced skills gap
Infosecurity News
IBM’s annual study finds over half of breached firms pass costs on
The Record
The cost of a data breach has become higher than ever, according to the latest annual report from IBM that found organizations are now paying $4.5 million to deal with breaches.
Naked Security
“Three may keep a secret, if two of them are dead.”
Ars Technica
12 weeks after critical vulnerability was patched, devices are still being wrangled.
Naked Security
Latest episode – check it out now!
The Record
A coastal Mississippi county is in the process of recovering from a wide-ranging ransomware attack that took down nearly all of the government’s in-office computers.
DarkReading
Nation-states see the opportunity in targeting people directly through their mobile phones, in this case with sophisticated Android surveillanceware.
DarkReading
The Middle East and Africa region saw a whopping 135% increase in scams over the past year, with finance, telecommunications, and logistics the most-targeted sectors.
Bleeping Computer
20-year-old Conor Brian Fitzpatrick aka Pompompurin, the owner of the notorious BreachForums (aka Breached) hacking forum, has pleaded guilty to charges of hacking and possession of child pornography.
Infosecurity News
The figure accounts for losses due to downtime alone
Trend Micro
We recently found that an MSI installer built by the National Information Technology Board (NITB), a Pakistani government entity, delivered a Shadowpad sample, suggesting a possible supply-chain attack.
Infosecurity News
Latest quarterly figures show compromises at an all-time high
Infosecurity News
Barracuda research lifts the lid on widespread threat activity
Trend Micro
An analysis of advanced persistent threat (APT) group Red Menshen’s different variants of backdoor BPFDoor as it evolves since it was first documented in 2021.
CSO
Research predicts a spike in ransomware attacks against financial service organizations in 2023.
Bleeping Computer
Data from the first half of the year indicates that ransomware activity is on track to break previous records, seeing a rise in the number of payments, both big and small.
CSO
JFrog Curation vets and blocks infected open source or third-party packages before they enter development.
The Record
Ransomware gangs have operated at a near-record profit in the first six months of the year, extorting more than $449 million from victims, according to blockchain research firm Chainalysis.
Trend Micro
In this entry, we discuss the findings of our investigation into a piece of a signed rootkit, whose main binary functions as a universal loader that enables attackers to directly load a second-stage unsigned kernel module.
The Record
A senior advisor to the Silk Road dark web market was sentenced Tuesday to 20 years in prison and ordered to pay $1.6 million for his role in distributing “massive quantities of narcotics” through the site.
Naked Security
Gaslights produce a telltale flicker when nearby lamps are lit; DRAM values do something similar when nearby memory cells are accessed.
Cyber Security News
ICMP protocol is mainly used for error handling many different types of errors exist in the network layer and use to debug those errors.
Infosecurity News
Action Fraud figures also reveal increase in social media hacking
The Record
An interview with Christian-Marc Lifländer, the head of NATO's cyber and hybrid policy section, about NATO’s changing approach to cyber, and what will happen if attacks targeting Western states continue to increase.
Trend Micro
We analyze the technical details of a new ransomware family named Big Head. In this entry, we discuss the Big Head ransomware’s similarities and distinct markers that add more technical details to initial reports on the ransomware.
Infosecurity News
Individual is thought to be key figure in $30m gang
Infosecurity News
Individual is thought to be key figure in $30m gang
Trend Micro
Since its initial release in late 2022, the AI-powered text generation tool known as ChatGPT has been experiencing rapid adoption rates from both organizations and individual users. However, its latest feature, known as Shared Links, comes with the potential risk of unintentional disclosure of confidential information.
The Record
In issuing the injunction, the judge singled out comments by CISA Director Jen Easterly. The ruling applies to actions by that agency, the Justice Department and more.
Cyber Security News
Neo_Net - a Spanish-based threat actor, has conducted campaigns against financial institutions and banks and achieved the highest success rate in spite of its unsophisticated tools.
Security Affairs
Researchers reported that there are 490,000 Fortinet firewalls exposing SSL VPN interfaces on the internet, and roughly 69% of them are still vulnerable to CVE-2023-27997. In Mid-June Fortinet addressed a critical flaw, tracked as CVE-2023-27997 (CVSS score: 9.2), in FortiOS and FortiProxy that is likely exploited in a limited number of attacks. “A heap-based buffer overflow vulnerability […]
Trend Micro
We found that malicious actors used malvertising to distribute malware via cloned webpages of legitimate organizations. The distribution involved a webpage of the well-known application WinSCP, an open-source Windows application for file transfer. We were able to identify that this activity led to a BlackCat (aka ALPHV) infection, and actors also used SpyBoy, a terminator that tampers with protection provided by agents.
Security Affairs
A new Windows information stealer dubbed ThirdEye appeared in the threat landscape, it has been active since April. Fortinet FortiGuard Labs discovered a previously undetected information stealer named ThirdEye. The malicious code is not sophisticated and can allow operators to steal various information from the infected machines. Fortinet started investigating the threat after the discovery of an […]
Security Affairs
Researchers warn of a massive spike in May and June 2023 of the activity associated with the ransomware group named 8Base. VMware Carbon Black researchers observed an intensification of the activity associated with a stealthy ransomware group named 8Base. The experts observed a massive spike in activity associated with this threat actor between May and June 2023. […]
Cyber Security News
ChatGPT. After seven months, the temptation of ChatGPT, the game-changing chatbot, appears to be weakening.
Bleeping Computer
It was a relatively quiet week regarding ransomware news, with the BlackCat ransomware gang extorting Reddit and the ongoing MOVEit Transfer data breaches being the main focus.
Trend Micro
The Trigona ransomware is a relatively new ransomware family that began activities around late October 2022 — although samples of it existed as early as June 2022. Since then, Trigona’s operators have remained highly active, and in fact have been continuously updating their ransomware binaries.
Naked Security
Lots to learn this week – listen now! (Full transcript inside.)
Ars Technica
Amazon layoffs were supposed to shut down the 25-year-old site back in April.
Trend Micro
In this blog post, we discuss different configuration scenarios that may lead to security issues with Azure Service Fabric, a distributed platform for deploying, managing, and scaling microservices and container applications.
Naked Security
“Do as we say, not as we do!” – The patches took ages to come out, but don’t let that lure you into taking ages to install them.
Trend Micro
This is the third installment of a three-part technical analysis of the fully undetectable (FUD) obfuscation engine BatCloak and SeroXen malware. In this entry, we document the techniques used to spread and abuse SeroXen, as well as the security risks, impact, implications of, and insights into highly evasive FUD batch obfuscators.
DarkReading
A PRC-aligned actor used a trio of custom malware to take advantage of inherent weaknesses in edge appliances.
Infosecurity News
Allied security agencies reveal figure in new advisory
Security Affairs
Malware researchers analyzed the application of Large Language Models (LLM) to malware automation investigating future abuse in autonomous threats. Executive Summary In this report we shared some insight that emerged during our exploratory research, and proof of concept, on the application of Large Language Models to malware automation, investigating how a potential new kind of […]
DarkReading
Threat actors have grown increasingly sophisticated in applying social engineering tactics against their victims, which is key to this oft-underrated cybercriminal scam's success.