Latest Cybersecurity News and Articles
11 February 2023
Suspected Russian threat actors have been targeting Eastern European users in the crypto industry with fake job opportunities as bait to install information-stealing malware on compromised hosts.
The attackers "use several highly obfuscated and under-development custom loaders in order to infect those involved in the cryptocurrency industry with Enigma stealer," Trend Micro researchers Aliakbar
11 February 2023
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active abuse in the wild.
Included among the three is CVE-2022-24990, a bug affecting TerraMaster network-attached storage (TNAS) devices that could lead to unauthenticated remote code execution with the highest privileges.
Details
10 February 2023
If a cybercriminal doesn’t name their strain themselves, a cybersecurity researcher creates the name. The primary researcher of the strain will usually come up with the name, and they sometimes assign one that seems random but usually is not.
10 February 2023
Several California medical groups have sent security breach notification letters to more than three million patients alerting them that crooks may have stolen a ton of their sensitive health and personal information during a ransomware infection.
10 February 2023
Microsoft has tracked down a sophisticated authentication bypass for Active Directory Federated Services (AD FS), pioneered by the Russia-linked Nobelium threat actor group.
10 February 2023
Noa Zilberman is the Head of Startups for Check Point. Previously, she Co-Founded Odo Security, and served as the company’s Chief Product Officer. Odo offered a cloud-based, clientless secure access service edge technology that delivered secure remote access. In 2020, Check Point acquired the company for $30 million and integrated the technology into its Infinity […]
The post Check Point’s Head of Startups on Women in STEM appeared first on CyberTalk.
10 February 2023
2023 CISO Priorities Flashcard shows that automation investments and increased technologies such as AI and machine learning are a top priority.
10 February 2023
The technical write-up by ReversingLabs threat researchers Lucija Valentic and Karlo Zanki says the malicious package consisted of two files, one obfuscated via the JavaScript obfuscator.
10 February 2023
Apple said in its response that it was "particularly concerned by some of the remedy options that the CMA is now considering in relation to cloud gaming, which appear to fall outside the underlying basis for the market investigation."
10 February 2023
For many, CVSS from FIRST has been the driving force in that process. One of the major objectives behind the calculation of the actual CVSS number is to ensure standardization so all CVEs are scored consistently and can be accurately compared.
10 February 2023
The lack of vendor patches may be compounding cyber risk for industrial asset owners in critical sectors like transportation and utilities. Even when they’re available, security updates in these environments aren’t always easy to apply.
10 February 2023
Mass events like the Super Bowl can become targets for cyberattacks. Security leaders need to plan ahead to keep entertainment, staff and guests safe.
10 February 2023
Nisha Holt is Check Point’s Head of Americas Channel Sales. She joined Check Point in 2020 and served as the Head of National Channel partners. Nisha has been in cyber security for over 20 years with a concentrated focus on helping organizations grow through partnerships, alliances and other varying routes to market. In this dynamic […]
The post Wisdom from the women leading the cyber security industry appeared first on CyberTalk.
10 February 2023
EXECUTIVE SUMMARY: Organizations leverage cloud computing to reduce compute costs and to rapidly provision new computing resources for the purpose of supporting evolving business needs. Cloud-based technologies provide opportunities to go-to-market quickly, allowing enterprises to reach stakeholders and customers faster than ever before. Across the past 10 years, cloud computing has transformed from into a […]
The post Top 5 cloud security breaches (and lessons) appeared first on CyberTalk.
10 February 2023
Four different rogue packages in the Python Package Index (PyPI) have been found to carry out a number of malicious actions, including dropping malware, deleting the netstat utility, and manipulating the SSH authorized_keys file.
The packages in question are aptx, bingchilling2, httops, and tkint3rs, all of which were collectively downloaded about 450 times before they were taken down. While
10 February 2023
Attack chains mounted by the hacking crew entail the exploitation of known security flaws in Apache Log4j, SonicWall, and TerraMaster NAS appliances to gain initial access, followed by reconnaissance, lateral movement, and ransomware deployment.
10 February 2023
The goal to offer newer methods around the vulnerability management process came after Bettini ran the Tenable research team, where he led developers to write detection code for all Tenable products but faced prioritization challenges.
10 February 2023
The top countries affected by tech support scams are the United States, Brazil, Japan, Canada, and France. These scams typically start with a pop-up window claiming a malware infection and urging the person to call a helpline for resolution.
10 February 2023
Keely Wilkins is an Evangelist with the Office of the CTO as well as a Pre-Sales Security Engineer in Virginia. She has worked in the technology industry for nearly thirty years, holds an MS of Cybersecurity and a variety of certifications. Keely is currently studying toward a Master of Legal Studies specializing in Cybersecurity Law […]
The post Cyber risk: Secure before you insure appeared first on CyberTalk.
10 February 2023
Single vendor shops have also emerged as an alternative to large marketplaces, allowing vendors to save on the fees that would otherwise go to the admins of markets like Hydra.