Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for Nigerian Cyber Crimi ...

 Firewall Daily

Abiola Kayode, a 37-year-old Nigerian national, was extradited to Nebraska facing charges related to a massive wire fraud scheme, the United States Attorney’s Office for the District of Nebraska announced Wednesday.   The charges stem from his alleged involvement in a Business Email Compromise (BEC) scam that   show more ...  

swindled millions of dollars from businesses across the United States. Kayode, who was featured on the FBI’s Most Wanted Cyber Criminal List, is accused of playing a key role in orchestrating fraudulent wire transfers from 2015 to 2016.  Kayode was arrested in Ghana in April 2023 on request of U.S. authorities. The Ghanaian authorities cooperated with American law enforcement, leading to Kayode’s eventual handover to FBI agents. Following his arrival in Nebraska, Kayode made his initial appearance in court on Wednesday, where U.S. Magistrate Judge Michael Nelson ordered that he remain detained pending trial.  The charges against Kayode stem from a criminal conspiracy involving BEC, a form of cybercrime in which criminals pose as legitimate executives of a company to trick employees into wiring money to fraudulent accounts.   Kayode allegedly worked alongside co-conspirators who impersonated company leaders and convinced unsuspecting employees to wire large sums of money. The indictment specifies that between January 2015 and September 2016, these fraudulent activities caused over $6 million in losses to businesses across Nebraska and beyond.  The Fraudulent Scheme and Kayode’s Role  According to the indictment, Kayode provided bank account details to the co-conspirators responsible for sending fraudulent emails. These emails were designed to appear as though they came from company executives, instructing employees to make wire transfers. The recipients, believing the messages were legitimate, followed the instructions, transferring funds into accounts controlled by Kayode and his partners. In many cases, these bank accounts were associated with victims of internet romance scams, further complicating the trail of illicit funds.  Several co-conspirators in the scheme have already been convicted and sentenced. Notably, Adewale Aniyeloye, one of the individuals responsible for sending the fake emails, was sentenced in February 2019 to 96 months in prison and ordered to pay restitution of $1.57 million.   Another co-conspirator, Pelumi Fawehinimi, who acted as a facilitator by providing bank accounts for the wire transfers, received a 72-month prison sentence and was ordered to pay over $1 million in restitution. Onome Ijomone, involved in romance scams, was sentenced in January 2020 to five years in prison after being extradited from Poland. More recently, Alex Ogunshakin, who provided bank accounts for the scheme, was sentenced to 45 months in prison in October 2024 following his extradition from Nigeria.  FBI’s Pursuit of Cyber Criminals  The successful extradition of Abiola Kayode marks a important step in the FBI’s ongoing efforts to combat cybercrime and hold criminals accountable, regardless of where they operate. Eugene Kowel, the FBI Omaha Special Agent in Charge, emphasized the bureau’s commitment to dismantling fraud schemes that target U.S. citizens.   “Four years ago, we identified six Nigerian nationals suspected of defrauding individual victims and businesses in Nebraska and other states of millions of dollars,” Kowel said. “Today, Abiola Kayode is the second of those co-conspirators to be extradited to stand trial in Nebraska. Our message to the remaining four co-conspirators; we are coming for you.”  Kowel further highlighted the importance of international cooperation in bringing cybercriminals to justice. “Dismantling cyber-criminal groups that victimize U.S. citizens is a priority for the FBI, DOJ, and our international law enforcement partners. The FBI, working together with our partners in Ghana, particularly the Office of the Attorney General and Ministry of Justice, the Ghana Police Service - INTERPOL, and the Ghana Immigration Service, will continue to pursue and bring to justice criminals who engage in Business Email Compromise and other fraud schemes,” Kowel stated.  The investigation into Kayode and his co-conspirators was led by the FBI, with assistance from the Department of Justice’s Office of International Affairs in securing Kayode’s extradition  Ongoing Efforts to Combat Cyber Crime and Wire Fraud Scheme  Despite the extradition and convictions of several key figures in the BEC operation, many co-conspirators remain at large. As authorities continue to pursue the remaining members of the fraud ring, they emphasize the need for vigilance and international collaboration to combat cybercrime.   The case against Abiola Kayode and his co-conspirators highlights the growing threat of cybercrime and the need for coordinated law enforcement efforts across borders. As more individuals like Kayode are brought to justice, the legal authorities continue to pursue those responsible for Wire Fraud and other cybercrimes, no matter where they are hiding. 

image for CISA Enhances Public ...

 Firewall Daily

The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Public Safety Communications and Cyber Resiliency Toolkit with the release of seven new resources aimed at improving the security and resilience of communication systems used by public safety agencies nationwide.   The toolkit's new   show more ...  

additions come as part of CISA’s ongoing commitment to enhancing national security and supporting emergency preparedness in the public safety sector. These updates address a range of challenges, from cyber threats to new technologies, ensuring that communication systems remain intact and secure during everyday operations and critical situations.  A Focus on Cyber Resiliency in Public Safety  Public safety agencies are increasingly reliant on sophisticated communication networks to coordinate responses during emergencies and deliver essential services to the public. However, as communication technology advances, the vulnerabilities of these systems also grow. Disruptions in public safety communications can have severe consequences, delaying emergency responses and potentially endangering lives. As such, cybersecurity and cyber resiliency are critical priorities for public safety organizations, which must prepare for and defend against cyberattacks, natural disasters, and other disruptions.  CISA’s Cyber Resiliency Toolkit provides public safety agencies with a comprehensive suite of resources designed to strengthen communication networks. The toolkit helps agencies assess their current systems, identify potential vulnerabilities, and implement strategies to protect their infrastructure from a wide variety of threats, including cyberattacks, ransomware, and even disruptions like electromagnetic pulse (EMP) events. By focusing on enhancing cyber resiliency, CISA aims to ensure that public safety communications are not only secure but also capable of withstanding and recovering from potential attacks or other incidents.  New Additions to the Toolkit  A key addition to the toolkit is enhanced guidance on defending against cyber threats, particularly ransomware. With these attacks becoming more frequent and sophisticated, the updated toolkit offers a comprehensive Cyber Resiliency strategy that emphasizes preparedness, rapid response, and recovery, helping agencies mitigate the impact of cyber incidents.  The toolkit also focuses on Next Generation 911 (NG911) systems, which provide advanced features like text-to-911 and multimedia messaging. However, these systems introduce new vulnerabilities. A dedicated resource now helps agencies secure NG911 infrastructure, offering best practices for strengthening cybersecurity and protecting these critical communication platforms.  Additionally, the toolkit includes the Infrastructure Dependency Primer, which helps public safety agencies identify and address vulnerabilities in the critical infrastructure supporting their communications. This resource is crucial for improving overall cyber resiliency and ensuring that communication systems remain operational during power outages or infrastructure failures.  Finally, the updated toolkit provides guidance on defending against Electromagnetic Pulses (EMP) and radio frequency (RF) jamming, online threats that can disrupt public safety communications. The Radio Frequency Interference Best Practices Guidebook offers actionable steps to detect and mitigate the effects of these disruptions, further protecting communication networks in times of crisis.  Key Resources for Public Safety Agencies  The Public Safety Communications and Cyber Resiliency Toolkit has long been a vital resource for public safety agencies seeking to strengthen their communication networks. The toolkit offers a wide array of resources that cover critical topics, including:  Resiliency Planning: Tools like the "Infrastructure Resilience Planning Framework" help local, state, tribal, and territorial governments develop strategies to identify and address vulnerabilities in their communication systems. This framework is essential for ensuring that agencies can continue their operations during both routine activities and emergency situations.  Priority Services and Telecommunications: The toolkit includes information on ensuring priority access to communication networks during times of crisis, with services like Wireless Priority Services (WPS) and Government Emergency Telecommunications Service (GETS) helping emergency personnel maintain communication when networks are overloaded.  Cyber Resiliency for Public Safety: The "Cyber Resiliency Resources for Public Safety" document compiles tools and resources from federal agencies, industry experts, and trade associations to help agencies assess and enhance their cybersecurity defenses.  Public Safety Communications Ecosystem: An interactive graphic in the toolkit outlines the key components of the emergency communications ecosystem, helping public safety officials understand the relationships between various technologies and identify potential vulnerabilities in their networks.  Procurement and Vendor Guidance: The toolkit provides new resources like the "Connected Communities Procurement and Implementation Guidance," which offers public safety leaders a checklist of questions to ask when selecting vendors. This ensures that vendors' products and services align with the agency's cybersecurity policies and operational requirements.  Conclusion   The CISA Public Safety Communications and Cyber Resiliency Toolkit is an important resource that helps public safety agencies to protect themselves. Regularly updated with the latest best practices and guidance, the toolkit equips agencies to defend against cyber threats, protect the next-generation communication platforms, and ensure operational resilience during crises.  

image for How infostealers are ...

 Business

Although malicious programs that hunt for passwords, financial, and other sensitive data have been around for over 20 years, the word infostealer was coined only in the early 2010s. Recently, however, this relatively simple type of malware has been popping up in unexpected role — deployed as a springboard for major   show more ...  

targeted hacks and cyberattacks. For example, the theft of the data of 500 million Ticketmaster customers and a ransomware attack on the Brazilian Ministry of Health were both traced to infostealers. The main challenge posed by infostealers is that they cant be defeated solely at the infrastructure level and within a companys perimeter. The non-work activities and personal devices of employees also need to be considered. Modern infostealers Infostealers are programs indiscriminately installed on any accessible devices by threat actors looking to steal sensitive information of any kind. Their primary target is account passwords, crypto wallet credentials, credit card details, and browser cookies. The latter can be used to hijack a user session in an online service. In other words, if the victim is logged in to a work account in the browser, by copying cookies to another computer an attacker in some cases can gain access to it without even knowing the victims credentials. Infostealers can also: Intercept email and chat messages Pilfer documents Steal images Take screenshots of the screen or windows of specific applications And there are exotic specimens that apply optical character recognition to read text in JPG image files (pictures of passwords and financial data, for example). The infostealer sends all collected data to the C2 server, where its stored pending resale on the dark web. Among recent years technical developments in the field of infostealers are: new methods of stealing data from protected browser storage, modular architecture for harvesting new types of data from already infected computers, and migration to a service model for distribution of this malware. The cybercriminal market demands versatile infostealers, capable of data theft from dozens of browsers, crypto wallets, and popular applications, such as Steam and Telegram. The stealers must also be resistant to detection by security software, requiring developers to make frequent modifications to the malware, repackage it, equip it with anti-analysis and anti-debugging tools, and beef up its stealth. The vendors also often need to re-upload packaged malware to different hosting sites. This is necessary because old sources of malware are quickly blocked by infosec companies in cooperation with search engines and hosting providers. Infostealers are mainly made for Windows and macOS systems — with the latter case being far from exotic but an up-and-coming segment in the cybercriminal market. There are stealers for Android, too. Some common delivery channels for infostealers are spam and phishing, malicious advertising, and SEO poisoning. Besides campaigns involving infostealers kitted out with hacked software or game cheats, such malware may also be installed under the guise of a browser or antivirus update, as well as video conferencing applications. But in general, attackers monitor the zeitgeist and clothe their malware accordingly: this year, fake AI image generators were popular, and during the global CrowdStrike outage, there even appeared an infostealer masquerading as device recovery instructions. Infostealer ecosystem A clear division of labor has taken root in the world of cybercrime. Some threat actors develop their own infostealers — plus the tools to manage them. Others get these programs onto victims devices using phishing and other techniques. Still others utilize stolen data. These three categories of criminals usually operate independently — not as one group, but they do have commercial relations with each other. The first of them increasingly offers infostealers under the malware-as-a-service (MaaS) model, often packaged with a handy cloud-based dashboard for customization. The operators of actual attacks spread the malware but dont use the stolen data themselves — instead putting large databases of harvested information up for sale on underground forums where other cybercriminals buy them and search for specific data they want using special tools. The same database can be purchased and repackaged many times: some buyers will extract gaming accounts, others look for bank card details or accounts in corporate systems. This latter type of data in particular has been gaining popularity since 2020 as threat actors have come to realize it provides a stealthy and effective way to penetrate an organization. Stolen accounts allow them to log in to a corporate system as a real user without exploiting any vulnerabilities or malware — thus arousing no suspicion. The COVID-19 pandemic forced companies to make greater use of cloud services and allow remote access to their systems, causing the number of potentially vulnerable businesses to skyrocket. And more company employees are now using remote access from personal computers, where information security policies are less well-enforced (if at all). Thus, a home computer infected with an infostealer can ultimately lead to unwelcome guests in the corporate network. Attackers who have obtained corporate credentials verify their validity and pass this filtered data to the operators of targeted cyberattacks. How to guard against infostealers Securing every corporate computer and smartphone (EDR/EMM) is only the start. You need to also protect all employees personal devices against infostealers, and, in case of infection, mitigate the consequences. There are several ways to address this issue — some of which complement each other: Deny access to corporate systems from personal devices. The most drastic, inconvenient, and not-always-feasible solution. In any case, it doesnt fix the problem entirely: for example, if your company uses public cloud services (email, file storage, CRM) for work tasks, a blanket ban will be impossible. Use group policies to disable browser synchronization on corporate computers so that passwords dont end up on personal devices. Implement phishing-proof two-factor authentication at the corporate perimeter, in all important internal and public services. Make mandatory the installation of an Enterprise Mobility Management (EMM) solution on personal laptops and smartphones in order to monitor their security (check for up-to-date security solution databases, whether the solution is disabled, and whether the devices are password- and encryption-protected). A properly configured EMM system maintains strict separation of work and personal data on the employees device and doesnt affect personal files and applications. Deploy an advanced identity management system (for the accounts of employees, devices, and software services) across your organization to help quickly locate and block accounts showing abnormal behavior; this will prevent, for example, employees from logging in to systems not needed for work or from suspicious locations. Get the latest dark-web threat intelligence with live reports on fresh leaks of your corporate data (including stolen accounts).

image for With

 Feed

A new side-channel attack method is a computationally practical way to infer the structure of a convolutional neural network — meaning that cyberattackers or rival companies can plagiarize AI models and take their data for themselves.

 Cybercrime

Ardit Kutleshi, 26, and Jetmir Kutleshi, 28, were arrested in Kosovo by local law enforcement on Thursday and U.S. officials submitted a request for extradition through an indictment unsealed in the Western District of Pennsylvania. Another operator was also arrested and is expected to be prosecuted in Kosovo.

 Feed

The U.S. Department of Justice (DoJ) on Thursday announced the shutdown of an illicit marketplace called Rydox ("rydox.ru" and "rydox[.]cc") for selling stolen personal information, access devices, and other tools for conducting cybercrime and fraud. In tandem, three Kosovo nationals and administrators of the service, Ardit Kutleshi, Jetmir Kutleshi, and Shpend Sokoli, have been arrested. Ardit

 Feed

Cybersecurity researchers have uncovered a new Linux rootkit called PUMAKIT that comes with capabilities to escalate privileges, hide files and directories, and conceal itself from system tools, while simultaneously evading detection. "PUMAKIT is a sophisticated loadable kernel module (LKM) rootkit that employs advanced stealth mechanisms to hide its presence and maintain communication with

 Feed

Iran-affiliated threat actors have been linked to a new custom malware that's geared toward IoT and operational technology (OT) environments in Israel and the United States. The malware has been codenamed IOCONTROL by OT cybersecurity company Claroty, highlighting its ability to attack IoT and supervisory control and data acquisition (SCADA) devices such as IP cameras, routers, programmable

 Feed

Run by the team at orchestration, AI, and automation platform Tines, the Tines library contains pre-built workflows shared by real security practitioners from across the community, all of which are free to import and deploy via the Community Edition of the platform.  Their bi-annual “You Did What with Tines?!” competition highlights some of the most interesting workflows submitted by their

 Feed

A security flaw has been disclosed in OpenWrt's Attended Sysupgrade (ASU) feature that, if successfully exploited, could have been abused to distribute malicious firmware packages. The vulnerability, tracked as CVE-2024-54143, carries a CVSS score of 9.3 out of a maximum of 10, indicating critical severity. Flatt Security researcher RyotaK has been credited with discovering and reporting the

 Feed

The U.S. Department of Justice (DoJ) has indicted 14 nationals belonging to the Democratic People's Republic of Korea (DPRK or North Korea) for their alleged involvement in a long-running conspiracy to violate sanctions and commit wire fraud, money laundering, and identity theft by illegally seeking employment in U.S. companies and non-profit organizations. "The conspirators, who worked for

 Feed

A now-removed GitHub repository that advertised a WordPress tool to publish posts to the online content management system (CMS) is estimated to have enabled the exfiltration of over 390,000 credentials. The malicious activity is part of a broader attack campaign undertaken by a threat actor, dubbed MUT-1244 (where MUT refers to "mysterious unattributed threat") by Datadog Security Labs, that

 0CISO2CISO

Source: news.sophos.com – Author: Angela Gunn It’s not news that 2024 has been a tumultuous year on many fronts. For our second Active Adversary Report of 2024, we’re looking specifically at patterns and developments we noted during the first half of the year (1H24). Though the year itself was in many ways   show more ...  

unremarkable on the […] La entrada The Bite from Inside: The Sophos Active Adversary Report – Source: news.sophos.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: johnk. Bug bounty programs are instrumental in categorizing bugs, triaging, prioritizing, and shutting down vulnerabilities before they blow up. Tech companies large and small, both established and quickly rising in the ranks, have all seen the value of using hacker-powered   show more ...  

security to scale their security team and find bugs before attackers […] La entrada How Companies Like Facebook Find the Bugs that Matter – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: Marten Mickos. Our civilization is going digital. That’s fantastic. Unfortunately our software is not secure enough to carry a digital and connected civilization. When systems get breached, people can’t trust the digital world. In a way, we are trying to do too much. Our   show more ...  

innovation is outpacing security and privacy. Something […] La entrada Hacking with Valor: Why We Raised $36.4M with Valor Equity Partners – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: johnk. It’s been two years since Upserve launched its public bug bounty program on HackerOne. During that time, Upserve’s security team has resolved over 85 valid vulnerabilities thanks to hackers, paying $68,000 in bounties along the way.  Over 10,000 restaurants use   show more ...  

Upserve to manage relationships with more than 57 million active […] La entrada Upserve Resolves Over 85 Bugs in Two Years Thanks to Hackers – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: johnk. Prior to attending Hacker Summer Camp, there were whispers (or roars) of the infestation of grasshoppers in Las Vegas, Nevada. Local and national news outlets shared horrifying images that would surely haunt any entomophobia dreams. We have to admit, we shared in the   show more ...  

panic. What were we going to do […] La entrada Bringing the Heat to Vegas: Recapping record-breaking h1-702 – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: johnk. A hacker is “one who enjoys the intellectual challenge of creatively overcoming limitations.” No one exemplifies that definition like Steve Gibson, Founder of Gibson Research Corporation. Steve has created a host of software programs, coined the term “spyware,”   show more ...  

and has created a revolutionary password-less authentication protocol, SQRL.  Recently, Steve mentioned […] La entrada HackerOne Praised By An Original Hacker – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: johnk. Vulnerabilities are a fact of life; risk comes with it. Today, companies, enterprises, and governments are embracing collaboration with hackers to find vulnerabilities before criminals have a chance to exploit them. A recent webinar held by HackerOne, entitled   show more ...  

Hacker-Powered Data – Security Weaknesses and Embracing Risk with HackerOne, outlined the […] La entrada Hacker-Powered Data – Security Weaknesses and Embracing Risk with HackerOne – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: johnk. Bug Bounties have become rather popular lately. So have common misconceptions. We’re here to set the record straight. We sat down with Laurie Mercer, a security engineer at HackerOne, to tackle four common myths about bug bounties and uncover the truth. Myth #1: Bug   show more ...  

Bounty Programs Have to Be Public […] La entrada Don’t Believe These 4 Bug Bounty Myths – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: johnk. Black Hat 2019 was the biggest and best yet. Over 20,000 attendees heated up Las Vegas with provocative training sessions, innovative presentations, and record-breaking live hacking events.  At booth 1330, we had a front row seat to some of the coolest trends at the   show more ...  

conference — and made some pretty […] La entrada Black Hat 2019: Highlights from the Biggest and Best Yet – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: johnk. Source: https://twitter.com/arkadiyt/status/1144842849135079424 We love hearing that customers can’t live without us. Who doesn’t? It’s especially gratifying coming from a repeat customer like Arkadiy. Arkadiy’s head of security at Lob, whose APIs help   show more ...  

developers send direct mail as easily as email. Prior to that, Arkadiy worked on the security team at Airbnb, […] La entrada The Security Vendors Startups like Lob Can’t Live Without – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: Cody Brocious. What do Netflix, Intuit, Facebook, PayPal, and HackerOne all have in common? All these companies, and many others, have adopted the GraphQL API query language. Recently, we rolled out 3 separate GraphQL-based Hacker101 Capture the Flag challenges. These are   show more ...  

valuable educational resources for hackers and developers alike, improving bug […] La entrada GraphQL Week on The Hacker101 Capture the Flag Challenges – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Crypto

Source: www.govinfosecurity.com – Author: Blockchain & Cryptocurrency , Cryptocurrency Fraud , Fraud Management & Cybercrime Also: Australia Fines Kraken AU$8 Million Over Breaches Prajeet Nair (@prajeetspeaks) • December 12, 2024     Image: Shutterstock Every week, Information Security Media   show more ...  

Group rounds up cybersecurity incidents in digital assets. This week, Scammers targeted crypto workers with malware-laced […] La entrada Crypto Roundup: Crypto Pros Targeted With Fake Meeting Apps – Source: www.govinfosecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.govinfosecurity.com – Author: Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Government Secret Blizzard Used Third-Party Amadey Bots to Hack Ukrainian Military Devices Jayant Chakravarti (@JayJay_Tech) • December 12, 2024     A Ukrainian soldier operating a drone on   show more ...  

the battlefield in 2023. (Image: Shutterstock) A Russian state-backed hacker group used third-party […] La entrada Russia Used Borrowed Spyware to Target Ukrainian Troops – Source: www.govinfosecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.govinfosecurity.com – Author: Cybercrime , Fraud Management & Cybercrime , Governance & Risk Management DOJ Indicts North Korean IT Workers for Using Remote Jobs to Steal Sensitive Info Chris Riotta (@chrisriotta) • December 12, 2024     Ballistic missiles on display during a North   show more ...  

Korea Victory Day parade in July 2013. (Image: Stefan Krasowski/CC […] La entrada US Indicts 14 North Koreans in IT Scam Funding WMD Programs – Source: www.govinfosecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.govinfosecurity.com – Author: Attack Surface Management , Cybercrime , Fraud Management & Cybercrime Possible Long-Term Attack by Unknown Hackers Thwarted Prajeet Nair (@prajeetspeaks) , David Perera (@daveperera) • December 12, 2024     A silver drachm of Malichus I from 34 B.C.E.   show more ...  

(Image:Classical Numismatic Group/CC BY-SA 3.0) Hackers exploiting flaws in Cleo Communications software […] La entrada New Malware Framework Targets Cleo File Systems – Source: www.govinfosecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.govinfosecurity.com – Author: Presented by DigiCert     60 Minutes     As software supply chain attacks grow more sophisticated, governments and industries are enforcing stricter compliance requirements, emphasizing transparency and effective risk management through regulations like the European   show more ...  

Union Digital Operational Resilience Act (DORA), NIS2 Directive, and Payment Card Industry Data Security Standard […] La entrada Unlocking Compliance: The Role of SBOMs in Modern Software Development – Source: www.govinfosecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Tara Seals, Managing Editor, News, Dark Reading Source: Rastislav Sedlak via Alamy Stock Photo The Dubai Police are the latest victims of impersonation by fraudsters in the United Arab Emirates (UAE), who are sending thousands of text messages out to unwitting mobile users   show more ...  

while purporting to represent the law enforcement agency. […] La entrada ‘Dubai Police’ Lures Anchor Wave of UAE Mobile Attacks – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Nate Nelson, Contributing Writer Statue of PrometheusSource: luminous via Alamy Stock Photo Reseachers have discovered hundreds of thousands of servers running Prometheus open source monitoring software on the open Web are exposing passwords, tokens, and opportunities for   show more ...  

denial of service (DoS) and remote code execution. As a leader among open source […] La entrada 336K Prometheus Instances Exposed to DoS, ‘Repojacking’ – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Chinese

Source: www.darkreading.com – Author: Becky Bracken, Senior Editor, Dark Reading Source: Vicky Barlow via Alamy Stock Photo NEWS BRIEF A surveillance tool named EagleMeSpy, developed by a Chinese software company for legal use by the country’s public security bureaus, has been scraping the most sensitive   show more ...  

data from targeted Android devices since at least 2017. Researchers […] La entrada Chinese Cops Caught Using Android Spyware to Track Mobile Devices – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 cloud

Source: www.darkreading.com – Author: Becky Bracken, Senior Editor, Dark Reading Source: Hilke Maunder via Alamy Stock Photo Internet of Things (IoT) vendor Ruijie Networks has shored up its Reyee cloud management platform against 10 newly discovered vulnerabilities that could have given adversaries control of   show more ...  

thousands of connected devices in a single cyberattack. The Fuzhou, China-based […] La entrada IoT Cloud Cracked by ‘Open Sesame’ Over-the-Air Attack – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Source: M4OS Photos via Alamy Stock Photo NEWS BRIEF Law enforcement agencies around the world have seized 27 of the most popular Web platforms used to launch distributed denial-of-service (DDoS) attacks. The international   show more ...  

operation, which remains ongoing, is known as PowerOFF and was coordinated by […] La entrada Europol Cracks Down on Holiday DDoS Attacks – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: Andrew Pratt. Every time you access an application that is designed for use with multiple accounts, you inherit a certain level of privileges. This level can vary significantly. In an unauthenticated state, you may have no sensitive privileges, but as an administrator or   show more ...  

manager, you can access all resources and functionality. […] La entrada How a Privilege Escalation Led to Unrestricted Admin Account Creation in Shopify – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: HackerOne. Crypto and blockchain organizations are among the most progressive, and often the first to adopt new technological developments and solutions to improve their processes. And with so much customer data and money on the line, web3 has become one of the most   show more ...  

aggressive industries when it comes to continuous security […] La entrada How Crypto and Blockchain Organizations Manage Complex Attack Surfaces With Competitive Security Testing Programs – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: The US Government has offered a $5m reward for information that leads to the disruption of financial mechanisms of persons engaged in a fake IT worker scheme targeting US firms that support the Democratic People’s Republic of Korea (DPRK).  The conspirators,   show more ...  

some of whom were ordered by their superiors to earn […] La entrada US Uncovers North Korean IT Worker Fraud, Offers $5M Bounty – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: Written by Threat actors’ abuse of legitimate Microsoft tools rose by 51% in the first half of 2024 compared to 2023, according to Sophos’ latest Active Adversary Report. The researchers observed 187 unique Microsoft Living Off the Land Binaries (LOLbins) used   show more ...  

by threat actors in 190 cyber incidents analyzed in H1 […] La entrada 2024 Sees Sharp Increase in Microsoft Tool Exploits – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Akira

Source: www.infosecurity-magazine.com – Author: Ransomware claims reached an all-time high in November 2024, with Corvus Insurance reporting 632 victims claimed on ransomware groups’ data leak sites (DLS). More than double the monthly average of 307 victims, the November count exceeds the previous peak of 527   show more ...  

victims recorded in May 2024. Source: Corvus Insurance According to […] La entrada Akira and RansomHub Surge as Ransomware Claims Reach All-Time High – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: Written by Researchers at industrial cybersecurity provider Claroty have discovered a new tool nation-state cyber threat actors use to attack civilian critical infrastructure. Team82, Claroty’s threat intelligence research team, obtained a sample of IOCONTROL,   show more ...  

custom-built malware that infects Internet of Things (IoT) and operational technology (OT) systems. Team82 has assessed that […] La entrada Researchers Discover Malware Used by Nation-Sates to Attack Industrial Systems – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2024-12
Aggregator history
Friday, December 13
SUN
MON
TUE
WED
THU
FRI
SAT
DecemberJanuaryFebruary