Category: Uncategorized
-
DrayTek Vulnerabilities Added to CISA KEV Catalog Exploited in Global Campaign Eduard Kovacs
Two DrayTek vulnerabilities added by CISA to its KEV catalog have been exploited by multiple threat groups to steal data from organizations worldwide. The post DrayTek Vulnerabilities Added to CISA KEV Catalog Exploited in Global Campaign appeared first on SecurityWeek. Read More
-
NIST Cybersecurity Framework (CSF) and CTEM – Better Together [email protected] (The Hacker News)
It’s been a decade since the National Institute of Standards and Technology (NIST) introduced its Cybersecurity Framework (CSF) 1.0. Created following a 2013 Executive Order, NIST was tasked with designing a voluntary cybersecurity framework that would help organizations manage cyber risk, providing guidance based on established standards and best practices. While this version was originallyRead…
-
US Targets Russian Election Influence Operation With Charges, Sanctions, Domain Seizures Eduard Kovacs
The US has cracked down on an influence operation sponsored by the Russian government, announcing charges, sanctions and domain seizures. The post US Targets Russian Election Influence Operation With Charges, Sanctions, Domain Seizures appeared first on SecurityWeek. Read More
-
Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore [email protected] (The Hacker News)
Threat actors are likely employing a tool designated for red teaming exercises to serve malware, according to new findings from Cisco Talos. The program in question is a payload generation framework called MacroPack, which is used to generate Office documents, Visual Basic scripts, Windows shortcuts, and other formats for penetration testing and social engineering assessments.…
-
New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm [email protected] (The Hacker News)
The Chinese-speaking threat actor known as Earth Lusca has been observed using a new backdoor dubbed KTLVdoor as part of a cyber attack targeting an unnamed trading company based in China. The previously unreported malware is written in Golang, and thus is a cross-platform weapon capable of targeting both Microsoft Windows and Linux systems. “KTLVdoor…
-
Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks [email protected] (The Hacker News)
Cisco has released security updates for two critical security flaws impacting its Smart Licensing Utility that could allow unauthenticated, remote attackers to elevate their privileges or access sensitive information. A brief description of the two vulnerabilities is below – CVE-2024-20439 (CVSS score: 9.8) – The presence of an undocumented static user credential for an administrative…
-
Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation Ryan Naraine
Microsoft is experimenting with a major new security mitigation to block attacks targeting flaws in the Windows Common Log File System (CLFS). The post Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation appeared first on SecurityWeek. Read More
-
What is a cloud architect and how do you become one?
Post ContentRead More
-
North Korean Hackers Targets Job Seekers with Fake FreeConference App [email protected] (The Hacker News)
North Korean threat actors have leveraged a fake Windows video conferencing application impersonating FreeConference.com to backdoor developer systems as part of an ongoing financially-driven campaign dubbed Contagious Interview. The new attack wave, spotted by Singaporean company Group-IB in mid-August 2024, is yet another indication that the activity is also leveraging native installers forRead More
-
White House unveils plan to improve BGP security
Post ContentRead More