Oktacron - Cyber Security RSS Feeds History

More Than Half of Security Pros Say Risks Higher in Cloud Than On Premise

cyware Oct 03, 2022 Trends, Reports, Analysis

Venafi surveyed 1,101 security decision-makers (SDMs) in firms with more than 1,000 employees and found that eighty-one percent of companies have experienced a cloud security incident in the last year.

News Royal Ransomware Operation Uses Callback Phishing Attacks

cyware Oct 03, 2022 Malware and Vulnerabilities

Launched in January 2022, a ransomware operation, recently dubbed Royal, was observed attacking corporations through targeted callback phishing campaigns. In the campaign, hackers pose as software providers and food delivery services prompting subscription renewals. The group has been demanding ransom in the range of $250,000 to $2 million.

Reflected XSS bugs in Canon Medical ’s Vitrea View could expose patient info

cyware Oct 03, 2022 Malware and Vulnerabilities

During a penetration test, Trustwave Spiderlabs’ researchers discovered two reflected cross-site scripting (XSS) vulnerabilities, collectively as CVE-2022-37461, in third-party software for Canon Medical’s Vitrea View.

Shangri-La Hotels Customer Database Hacked During Asian Security Summit

cyware Oct 03, 2022 Breaches and Incidents

The data breach affected hotels in Hong Kong, Singapore, Chiang Mai, Taipei, and Tokyo but the company said it had not yet been able to determine what data had been stolen.

NSA Cyber Specialist, Army Doctor Charged in US Spying Cases

cyware Oct 03, 2022 Incident Response, Learnings

A cyber specialist who worked at the US National Security Agency and an army doctor and his wife were charged Thursday in separate cases with seeking to sell US secrets to foreign governments.

Lazarus HHackers Abuse Dell Driver Bug Using New FudModule Rootkit

cyware Oct 03, 2022 Threat Actors

The spear-phishing campaign unfolded in the autumn of 2021, and the confirmed targets include an aerospace expert in the Netherlands and a political journalist in Belgium.

CISA Issues Guidance on Transitioning to TLP 2.0

cyware Oct 03, 2022 Security Tips and Advice

TLP is used to inform recipients of sensitive information on the extent to which they may share the provided data, and relies on four labels to indicate sharing boundaries that recipients can apply.

Hack Puts Latin American Security Agencies on Edge

cyware Oct 03, 2022 Incident Response, Learnings

A massive trove of emails from Mexico’s Defense Department is among electronic communications taken by a group of hackers from military and police agencies across several Latin American countries, Mexico’s president confirmed Friday,

Update: Data breach at border agency contractor involved up to 1.38 million license plates

cyware Oct 03, 2022 Incident Response, Learnings

The watchdog began its probe following 2019 media reports of a cyberattack on a U.S.-based third-party contractor used by both the Canadian border agency and its U.S. counterpart.

Never-Before-Seen Backdoors Spotted on VMware ESXi Servers

cyware Oct 03, 2022 Malware and Vulnerabilities

Mandiant discovered new espionage-related malware families—VIRTUALPITA and VIRTUALPIE—targeting VMware ESXi on Windows VMs and Linux vCenter servers— to gain persistent administrative access. VirtualPita is a passive backdoor (64-bit) that creates a listener at a hardcoded port number on a VMware ESXi server. show more ...

VirtualPie is a Python-based backdoor that uses a daemonized IPv6 listener on a hardcoded port at the VMware ESXi server.

German police identified a gang that stole $3.93 million via phishing attacks

cyware Oct 03, 2022 Incident Response, Learnings

The phishing campaigns were conducted between October 3, 2020, and May 29, 2021, the gang sent the victims messages purporting to be from German banks to trick them into giving up their TAN numbers for conducting fraudulent withdrawals.

Chinese hacking group targeting US agencies and companies has surged its activity, analysis finds

cyware Oct 03, 2022 Trends, Reports, Analysis

One of the Chinese groups tracked by PwC has targeted dozens of US organizations in the last year, including government agencies and software or tech firms, said Kris McConkey, who leads PwC’s global cyber threat intelligence practice.

Many IT pros don’t think a ransomware attack can impact Microsoft 365 data

cyware Oct 03, 2022 Trends, Reports, Analysis

The 2022 Ransomware Report by Hornetsecurity, which surveyed over 2,000 IT leaders, revealed that 24% have been victims of a ransomware attack, with 20% of attacks happening in the last year.

Analysis of DeftTorero TTPs in 2019–2021

cyware Oct 03, 2022 Threat Actors

During the intrusion analysis of DeftTorero’s webshells, researchers noted traces suggesting that the threat actor exploited a file upload form and/or a command injection flaw in a functional or staging website hosted on the target web server.

Commercial Chat Provider Comm100 Hijacked to Spread Malware in Supply Chain Attack

cyware Oct 03, 2022 Breaches and Incidents

The attack featured a trojan malware delivered via an installer for Comm100’s Windows Desktop agent software, available on the company website and signed using a valid Comm100 certificate dated September 26, 2022, according to Crowdstrike.

CISA Warns of Hackers Exploiting Critical Atlassian Bitbucket Server Vulnerability

cyware Oct 03, 2022 Threat Intel & Info Sharing

Tracked as CVE-2022-36804, the issue relates to a command injection vulnerability that could allow malicious actors to gain arbitrary code execution on susceptible installations by sending a specially crafted HTTP request.

BlackCat Ransomware Gang Claims to Hack US Defense Contractor NJVC

cyware Oct 03, 2022 Breaches and Incidents

BlackCat added NJVC to the list of victims on its Tor leak site and is threatening to release the allegedly stolen data if the company will not pay the ransom. The company supports intelligence, defense, and geospatial organizations.

Moody's turns up the heat on 'riskiest' sectors for attacks

cyware Oct 03, 2022 Trends, Reports, Analysis

About $22 trillion of global debt rated by Moody's Investors Service has "high," or "very high" cyber-risk exposure, with electric, gas and water utilities, as well as hospitals, among the sectors facing the highest risk of cyberattacks.

Researchers Link Cheerscrypt Linux-Based Ransomware to Chinese Hackers

cyware Oct 03, 2022 Malware and Vulnerabilities

The use of Cheerscrypt is the latest addition to a long list of ransomware families previously deployed by the group in little over a year, including LockFile, Atom Silo, Rook, Night Sky, Pandora, and LockBit 2.0.

Finnish intelligence warns of Russia’s cyberespionage activities

cyware Oct 03, 2022 Threat Intel & Info Sharing

The Finnish Security Intelligence Service (Suojelupoliisi or SUPO) warns of a highly likely intensification of cyberespionage activities conducted by Russia-linked threat actors over the winter.

Update: Ransomware gang leaks data stolen from LAUSD school system

cyware Oct 03, 2022 Breaches and Incidents

LAUSD superintendent Alberto M. Carvalho confirmed the release of stolen data in a statement posted to Twitter, along with announcing a new hotline (855-926-1129) for concerned parents and students to ask questions about the data leak.

Microsoft Exchange server zero-day mitigation can be bypassed

cyware Oct 03, 2022 Malware and Vulnerabilities

Microsoft has shared mitigations for two new Microsoft Exchange zero-day vulnerabilities tracked as CVE-2022-41040 and CVE-2022-41082, but researchers warn that the mitigation for on-premise servers is far from enough.

Update: Optus reveals extent of data breach, but stays mum on how it happened

cyware Oct 03, 2022 Incident Response, Learnings

Of the 9.8 million customers impacted by the data breach, 1.2 million have at least one form of identification number that is valid, says the Singtel-owned Australian operator, adding that it has brought in Deloitte to investigate the breach.

How Ransomware Is Causing Chaos In American Schools

packetstormsecurity Oct 03, 2022 headline,malware,cybercrime,fraud,crypto

Steganography Alert: Backdoor Spyware Stashed In Microsoft Logo

packetstormsecurity Oct 03, 2022 headline,malware,microsoft,backdoor

Supreme Court To Scrutinize U.S. Protections For Social Media

packetstormsecurity Oct 03, 2022 headline,government,usa,facebook,twitter