Oktacron - Cyber Security RSS Feeds History

New Chainsaw tool helps IR teams analyze Windows event logs

cyware Sep 07, 2021 Security Products & Services

Windows event logs are a ledger of the system’s activities. Forensic investigators rely on these records, sometimes as the main source of evidence, to create a timeline of events of interest.

“FudCo” Spam Empire Tied to Pakistani Software Firm – Krebs on Security

cyware Sep 07, 2021 Threat Actors

The current website for Fud Tools offers phishing templates or scam pages for many popular online sites like Office365 and Dropbox, as well as document-based exploits, scam page hosting, and more.

Jenkins Project Discloses Security Breach Involving Confluence Server Exploit

cyware Sep 07, 2021 Breaches and Incidents

Following the discovery of the hack, Jenkins developers said they permanently took down the hacked Confluence server, rotated privileged credentials, and reset passwords for developer accounts.

Golden SAML Attack - APT Hackers Hijacking Active Directory Server

cyware Sep 07, 2021 Breaches and Incidents

After detecting this attack and conducting an investigation, security analysts came to know that this attack operates by a threat actor hijacking, or obtaining access to the AD FS server.

Malware found pre-installed in cheap push-button mobile phones sold in Russia

cyware Sep 07, 2021 Mobile Security

A Russian security researcher that goes online with the name of ValdikSS has found malware preinstalled in four low-budget push-button mobile phones available for sale on Russian e-stores.

Office 365 to let admins block Active Content on Trusted Docs

cyware Sep 07, 2021 Security Products & Services

Microsoft says trusted docs are files with active content, such as ActiveX controls, macros, and Dynamic Data Exchange (DDE) functions, that open without warnings after the content has been enabled.

This is the perfect ransomware victim, according to cybercriminals

cyware Sep 07, 2021 Trends, Reports, Analysis

A new KELA report analyzed listings made by ransomware operators in the dark web, including access requests revealing that many want to break into US firms with a minimum revenue of over $100 million.

Aussie Researcher Fakes Digital COVID-19 Vaccination Proof

cyware Sep 07, 2021 Malware and Vulnerabilities

Australian software engineer Richard Nelson is warning that he was able to create a fake digital COVID-19 vaccine certificate via the government's Express Medicare Plus app.

TrickBot gang developer arrested when trying to leave Korea

cyware Sep 07, 2021 Threat Actors

After waiting for over a year for his passport to be renewed, the individual attempted to depart South Korea again but was arrested at the airport due to an extradition request by the USA.

Ad Fraud Protection Firm Pixalate Raises $18.1 Million

cyware Sep 07, 2021 Companies to Watch

Pixalate, a firm that provides fraud protection for mobile app and CTV advertising, has raised $18.1 million in growth capital, bringing the total amount raised by the company to $22.7 million.

We Could Start Seeing Some Hurricane Ida-related Investment Scams

cyware Sep 07, 2021 Threat Intel & Info Sharing

People should be wary to ask anyone approaching them with an investment opportunity if they’re licensed and if their investment is registered with the SEC or with a state.

The age of AI-powered devices at the edge

cyware Sep 07, 2021 Expert Blogs and Opinion

It is incumbent upon cybersecurity leaders to understand the issues of the edge and defend accordingly. This includes encrypting data, employing access-control methods, and creating microdata centers.

Ragnar Locker Ransomware Gang Threatens Victims of Leaking Data if they Contact FBI, Police, or Data Recovery Experts

cyware Sep 07, 2021 Threat Actors

In an announcement on Ragnar Locker's leak site, the group is threatening to publish full data of victims who seek the help of law enforcement and investigative agencies following a ransomware attack.

39% of all internet traffic is from bad bots

cyware Sep 07, 2021 Trends, Reports, Analysis

These bad bots include both basic web scrapers and attack scripts, as well as advanced persistent bots that try to evade defenses and attempt to perform their malicious activities under the radar.

Malicious Office documents make up 43% of all malware downloads

cyware Sep 07, 2021 Trends, Reports, Analysis

Microsoft Office documents help hundreds of millions of users in their daily tasks around the globe. At the same time, these documents are a lucrative way for cybercriminals to distribute malware.

Personal Details of 8,700 French Visa Applicants Gets Exposed by Attackers

cyware Sep 07, 2021 Breaches and Incidents

The French government said that the cyberattack was ‘quickly neutralised’ but that individuals’ names, dates of birth, passport and identity card numbers had been exposed.

PoC released for Ghostscript vulnerability that exposed Airbnb, Dropbox

cyware Sep 07, 2021 Malware and Vulnerabilities

Security researcher Emil Lerner demonstrated an unpatched vulnerability for Ghostscript version 9.50 at the ZeroNights X conference in Saint Petersburg, Russia last month.

Data Breach at US Restaurant and Gambling Chain Dotty’s Impacted Sensitive Customer Information

cyware Sep 07, 2021 Breaches and Incidents

A cyber-attack on US fast food and gambling chain Dotty’s, which provides services across 175 locations, has exposed the personal data of customers, the company has warned.

Personal Data of Millions of Moroccan Citizens Leaked Online by Cybercriminal

cyware Sep 07, 2021 Breaches and Incidents

Cyber-snooping into people’s personal information is a very concerning matter. According to Zataz, the intentional release of private and personal data took place on Friday night.

Howard University Investigates Alleged Ransomware Attack that Caused Network Outage

cyware Sep 07, 2021 Breaches and Incidents

Howard University announced Monday that they are investigating a ransomware attack. Their information technology team detected unusual activity on the school's network last Friday.

IoT Attacks Skyrocket, Doubling In Six Months

packetstormsecurity Sep 07, 2021 headline,hacker,flaw

Outlook Shows Real Contact Info For Spoofed IDNs

packetstormsecurity Sep 07, 2021 headline,microsoft,email,flaw,phish

Report: This Is The Perfect Ransomware Victim

packetstormsecurity Sep 07, 2021 headline,hacker,malware,cybercrime,fraud