Latest Cybersecurity News and Articles
17 February 2023
“This is different from the plenty of attacks we’ve seen that spoof PayPal. This is a malicious invoice that comes directly from PayPal,” reads an advisory by Avanan published earlier today.
17 February 2023
"The package can be taken over by recovering an expired domain name for one of its maintainers and resetting the password," software supply chain security company Illustria said in a report.
17 February 2023
By Devin Partida, Editor-in-Chief, Rehack.com. Addressing cyber risks is rarely a cut-and-dry experience. Cyber security is constantly evolving and shifting to face new threats and actors worldwide. Much of the action occurs on the digital playing field, but can the physical location of a business or organization increase the number of cyber attacks? With clarity on […]
The post Are cyber risks higher in different geographical areas? appeared first on CyberTalk.
17 February 2023
"Burton recently experienced a cyber incident, which is impacting some of our operations. We are working closely with third-party specialists to investigate the incident and determine the full nature and scope," Burton said.
17 February 2023
Just as LockBit 3.0 replaced Conti in 2022, newcomers such as BlackBasta, BianLian, and new-kid-on-the-block Royal are now all seriously vying for LockBit's crown in 2023.
17 February 2023
Frebniis ensures Failed Request Tracing is enabled and then accesses w3wp.exe (IIS) process memory, obtaining the address of where the Failed Request Event Buffering code (iisfreb.dll) is loaded.
17 February 2023
Ahead of the release of the first National Cybersecurity Strategy from the White House Office of the National Cyber Director, Dylan Presman, the director for budget and assessment, confirmed that it will include guidance on post-quantum cryptography.
17 February 2023
The discovery was made by Cybernews, who found an open ElasticSearch instance containing 22 million log entries referencing usernames, including individual users and business accounts.
17 February 2023
Entities in Armenia have come under a cyber attack using an updated version of a backdoor called OxtaRAT that allows remote access and desktop surveillance.
"The tool capabilities include searching for and exfiltrating files from the infected machine, recording the video from the web camera and desktop, remotely controlling the compromised machine with TightVNC, installing a web shell,
17 February 2023
Minerva Labs discovered a brand-new piece of stealthy malware known as Beep. Through this, malware authors were attempting to use as many anti-debugging and anti-VM (anti-sandbox) strategies as they could uncover. Beep is meant to evade detection and extract and launch additional payloads—via a technique called process hollowing—on a compromised system.
17 February 2023
Inglis, who spent 28 years at the NSA, including as a top deputy of the spy agency, has reportedly recommended that the White House nominate Kemba Walden as the new National Cyber Director.
17 February 2023
WIP26 is characterized by the abuse of public Cloud infrastructure – Microsoft 365 Mail, Microsoft Azure, Google Firebase, and Dropbox – for malware delivery, data exfiltration, and C2 purposes.
17 February 2023
Group-IB researchers have identified two malicious campaigns from 2020 and 2021, respectively, carried out by SideWinder APT that were designed to steal cryptocurrency. The researchers found two new home-grown tools used by SideWinder APT during the campaign: SideWinder.RAT.b and SideWinder.StealerPy. Given the groups’s financial backing and target list, researchers anticipate this threat to keep evolving and expanding.
17 February 2023
Norwegian authorities announced on Thursday that they had recovered $5.9 million of cryptocurrency stolen in the Axie Infinity hack – an incident widely held to have been perpetrated by the Lazarus Group, which has links to North Korea.
17 February 2023
The attackers use the same commercial online services that sales and marketing teams rely on to identify prospects and personalize communications. They also use Google Translate to translate their malicious emails into multiple languages.
17 February 2023
Recent guidance from the US Cyber Security and Infrastructure Security Agency (CISA) recognizes the need for organizations to continually validate defenses against the latest adversary tactics, techniques, and procedures (TTPs).
17 February 2023
The users receive an SMS with information on the status of a fictional package, presumably ordered from outside of the country. Also, they are informed of the fact that the delivery has failed due to the customs fee not being paid.
17 February 2023
This Red Team framework is designed to be capable of being highly evasive and undetectable by security products, as demonstrated also by many shellcodes we intercepted through hunting activities with zero detection rate on VirusTotal platform.
17 February 2023
Since January 2022, Trend Micro has been observing Earth Yako as it targets researchers in academic institutions and think tanks in Japan. They also observed a small number of attacks that appear to have targeted organizations in Taiwan.