Oktacron - Cyber Security RSS Feeds History

What hackers hunt for | Kaspersky official blog

kaspersky Oct 21, 2022 Business

If outsiders somehow get inside your network, it wont be pleasant — no matter what. However, you can minimize the potential damage of such a breach by thinking ahead about which assets an attacker would be most interested in and then beefing up their security. Heres what to focus on: 1. Personal data This is one of show more ...

the most sought-after types of information for cybercriminals. First, personal data (be it that of clients or employees) gives great leverage for extortion. Publication of such information can lead not only to loss of reputation and lawsuits from victims, but also to problems with regulators (who in regions with strict laws on PII processing and storage can impose heavy fines). Second, the dark web market for personal data is considerable — allowing hackers to try to monetize it there. To minimize the chances of personal data falling into the wrong hands, we advise storing it in encrypted form, granting access to it only to employees who really need it, and ideally keeping the amount of information collected as low as possible. 2. Finance apps A whole class of malware is used to prey on devices on which electronic payment systems and other financial applications are installed. These offer direct access to company funds, so a single substitution of the transaction beneficiary could have catastrophic consequences. Recently, at small companies in particular, this kind of software is being used more and more on mobile devices. To avoid monetary losses, the use of financial applications on devices not equipped with reliable security solutions should be prohibited. 3. Account credentials A single corporate device is not a very interesting target for typical attacker. This is why when they compromise one, they tend to hunt for various credentials for network resources, corporate services or remote access tools, as this allows them to extend the attack and regain access if the initial attempt is detected and blocked. They may also take an interest in the target companys work email and social media accounts, or the control panel of the corporate website — all of which can be used to attack colleagues of the initial victim, or the clients and partners. First, any device on which employees use corporate services or resources should have anti-malware protection. Second, its worth regularly reminding employees how to properly store passwords (and, if possible, providing them with the necessary application). 4. Data backup If an attacker gains access to a companys network, it might be a while before they find something to feed off, but the longer they dig, the greater the likelihood of being spotted and stopped. So dont make their work easier by leaving a folder called Backup in a conspicuous place. After all, backups usually contain information that the company is most afraid of losing — and hence of most interest to cybercriminals. Backups should be stored on media not connected to the companys main network, or in specialized cloud services. Doing so also grants additional protection of data in case of ransomware attacks. 5. Software compilation environment Sure, this advice is not one-size-fits-all: not every company develops software. On the other hand, there are quite a few small businesses and startups that do create applications. If your firm is one of them, we recommend paying special attention to protecting the compilation environment. These days, you dont need to be a large company to suffer a targeted attack. Its enough to make an application used by large companies, or just popular applications. Cybercriminals may try to infiltrate your development environment and make you a link in an attack through the supply chain. And the methods they deploy in such attacks can be quite ingenious. You should work out your development environment protection strategy in advance, and integrate special security tools that do not impact performance into the development process.

Exploit Attempts Underway for Apache Commons Text4Shell Vulnerability

darkreading Oct 21, 2022 Feed

The good news: The Apache Commons Text library bug is far less likely to lead to exploitation than last year's Log4j library flaw.

List of Common Passwords Accounts for Nearly All Cyberattacks

darkreading Oct 21, 2022 Feed

Half of a million passwords from the RockYou2021 list account for 99.997% of all credential attacks against a variety of honeypots, suggesting attackers are just taking the easy road.

Google's GUAC Aims to Democratize Software Supply Chain Security Metadata

darkreading Oct 21, 2022 Feed

Software makers and customers will be able to query graph database for information about the security and provenance of components in applications and codebases.

Iron Man Started His Journey From Scratch & Your Security Awareness Program Can Too

darkreading Oct 21, 2022 Feed

Build your company's security awareness program a suit of high-tech cybersecurity armor along with a collaborative atmosphere.

FBI: Iranian Threat Group Likely to Target US Midterms

darkreading Oct 21, 2022 Feed

Similar to what happened around the 2020 election, FBI warns that the Emennet Pasargad group is poised to target officials and companies with embarrassing hack-and-leak campaigns.

Passkey Demos Hint at What's Ahead for Passwordless Authentication

darkreading Oct 21, 2022 Feed

At the Authenticate Conference, Google and Microsoft demonstrated their passkey prototypes. Apple, meanwhile, already launched its version in iOS 16.

Be Cautious of Federal Student Aid Scams - Warns FBI

cyware Oct 21, 2022 Identity Theft, Fraud, Scams

The FBI warned against scammers targeting individuals seeking to enroll in the Federal Student Aid program for their payment details, money, and personal details. Through this debt relief program, cybercriminals are taking the opportunity to set up fake websites mimicking the application form, send benefit eligibility phishing messages, and try several fraud channels.

EnergyAustralia Blurted Out Customer Data in Cyberattack

cyware Oct 21, 2022 Breaches and Incidents

Details including customer names, addresses, email addresses, electricity and gas bills, phone numbers and the first six and last three digits of their credit cards are all included with those accounts.

Cybersecurity Workforce Gap Grows by 26% in 2022

cyware Oct 21, 2022 Trends, Reports, Analysis

While the significantly increased gap is a big cause for concern, it also indicates that organizations are taking cybersecurity more seriously, according to (ISC)2’s CEO Clar Rosso, speaking exclusively to Infosecurity.

RSA Mobile Lock Blocks Critical Threats on Mobile Phones

cyware Oct 21, 2022 Innovation and Research

Developed in partnership with Zimperium, a global leader in mobile device and app security, Mobile Lock only secures the authentication app; it does not restrict access to any other resources.

Ransomware is Being Used As a Precursor to Physical War: Ivanti

cyware Oct 21, 2022 Trends, Reports, Analysis

The data also shows ransomware groups continuing to grow in volume and sophistication, with 35 vulnerabilities becoming associated with ransomware in the first three quarters of 2022 and 159 trending active exploits.

Hackers Started Exploiting Critical "Text4Shell" Apache Commons Text Vulnerability

cyware Oct 21, 2022 Malware and Vulnerabilities

A successful exploitation of the flaw can enable a threat actor to open a reverse shell connection with the vulnerable application simply via a specially crafted payload, effectively opening the door for follow-on attacks.

Cops Arrest Suspected Multimillion-Dollar Fraud Mastermind

cyware Oct 21, 2022 Laws, Policy, Regulations

The suspect apparently posed as an employee of a real Genevan investment company to gain the trust of his victims, using a spoofed website to confer legitimacy on the scam.

Google Unveils Open Source Project to Improve Software Supply Chain Security

cyware Oct 21, 2022 Security Products & Services

GUAC is meant to democratize the availability of this security information by making it freely accessible and useful for every organization, not just those with enterprise-scale security and IT funding.

Thousands of Publicly Exposed API Tokens Could Threaten Software Integrity

cyware Oct 21, 2022 Breaches and Incidents

The scan results showed that Amazon Web Services (AWS), Google Cloud Platform and Telegram API tokens were the most leaked tokens. At the same time, the figures showed Amazon developers revoked 53% of all inactive tokens, while GCP only revoked 27%.

BlackByte Ransomware Uses New Data Theft Tool for Double Extortion

cyware Oct 21, 2022 Malware and Vulnerabilities

Exbyte was discovered by security researchers at Symantec, who say that the threat actors use the Go-based exfiltration tool to upload stolen files directly to the Mega cloud storage service.

Password Report: Honeypot Data Shows Bot Attack Trends Against RDP, SSH

cyware Oct 21, 2022 Trends, Reports, Analysis

The report concludes that the use of long, strong random strings such as those generated by password managers and not likely to be included in ‘dictionaries’ would provide a very strong defense against opportunistic bot-driven automated attacks.

ERMAC Banking Trojan Targets Hundreds of Android Users

cyware Oct 21, 2022 Malware and Vulnerabilities

Cyble detected a mass phishing campaign targeting Android users with the ERMAC banking trojan with the latest version of the trojan targeting 467 apps. The threat actor used typosquatted domains of popular Android application hosting platforms such as Google PlayStore, APKPure, and APKCombo.

Vulnerabilities in Cisco Identity Services Engine Require Your Attention

cyware Oct 21, 2022 Malware and Vulnerabilities

There are no workarounds available for the two flaws. And, while there’s currently a fix for CVE-2022-20959 (for one specific ISE version and patch level), other fixes are scheduled to be released in the coming months – some even in January 2023.

Cyber-Enabled Crimes Are Biggest Police Concerns

cyware Oct 21, 2022 Trends, Reports, Analysis

Interpol warned that the pandemic had fomented new underground offerings like “financial crime-as-a-service,” including digital money laundering tools which help to lower the barrier to entry for criminal gangs.

Multiple Campaigns Abuse VMware Bug to Deploy Crypto-miners and Ransomware

cyware Oct 21, 2022 Malware and Vulnerabilities

The findings are yet another reminder that malware campaigns continue to actively exploit recently disclosed flaws to break into unpatched systems, making it essential that users prioritize applying necessary security updates to mitigate threats.

Microsoft Confirms Server Misconfiguration Led to 65,000+ Companies' Data Leak

cyware Oct 21, 2022 Breaches and Incidents

The misconfiguration of the Azure Blob Storage was spotted on September 24, 2022, by cybersecurity company SOCRadar, which termed the leak BlueBleed. Microsoft said it's in the process of directly notifying impacted customers.

Elon Musk To Cut Twitter Staff By 75% As Biden Worries Deal Threatens National Security

packetstormsecurity Oct 21, 2022 headline,government,usa,russia,twitter

Oops, Web Trackers May Have Leaked 3 Million Patients' Info

packetstormsecurity Oct 21, 2022 headline,privacy,data loss,flaw

Hacker Who Stole Ed Sheeran Songs Jailed

packetstormsecurity Oct 21, 2022 headline,hacker,data loss

UT Hacked Starlink's Signal So It Can Be Used As A GPS Alternative

packetstormsecurity Oct 21, 2022 headline,hacker,space,science