Category: Uncategorized
-
New BlackCat Ransomware Variant Adopts Advanced Impacket and RemCom Tools [email protected] (The Hacker News)
Microsoft on Thursday disclosed that it found a new version of the BlackCat ransomware (aka ALPHV and Noberus) that embeds tools like Impacket and RemCom to facilitate lateral movement and remote code execution. “The Impacket tool has credential dumping and remote service execution modules that could be used for broad deployment of the BlackCat ransomware in target environments,” the…
-
Israel, US to Invest $4 Million in Critical Infrastructure Security Projects Ionut Arghire
Israel and US government agencies have announced plans to invest close to $4 million in projects to improve the security of critical infrastructure systems. The post Israel, US to Invest $4 Million in Critical Infrastructure Security Projects appeared first on SecurityWeek. Read More
-
Federally Insured Credit Unions Required to Report Cyber Incidents Within 3 Days Ionut Arghire
The National Credit Union Administration is requiring all federally insured credit unions to report cyber incidents within 72 hours of discovery. The post Federally Insured Credit Unions Required to Report Cyber Incidents Within 3 Days appeared first on SecurityWeek. Read More
-
Google Chrome’s New Feature Alerts Users About Auto-Removal of Malicious Extensions [email protected] (The Hacker News)
Google has announced plans to add a new feature in the upcoming version of its Chrome web browser to alert users when an extension they have installed has been removed from the Chrome Web Store. The feature, set for release alongside Chrome 117, allows users to be notified when an add-on has been unpublished by…
-
ProjectDiscovery Lands $25M Investment for Cloud Security Tech Ryan Naraine
San Francisco startup ProjectDiscovery has banked $25 million in early-stage financing as investors continue bet on cloud security vendors. The post ProjectDiscovery Lands $25M Investment for Cloud Security Tech appeared first on SecurityWeek. Read More
-
Google Brings AI Magic to Fuzz Testing With Eye-Opening Results Ryan Naraine
Google sprinkles magic of generative-AI into its open source fuzz testing infrastructure and finds immediate success with code coverage. The post Google Brings AI Magic to Fuzz Testing With Eye-Opening Results appeared first on SecurityWeek. Read More
-
NoFilter Attack: Sneaky Privilege Escalation Method Bypasses Windows Security [email protected] (The Hacker News)
A previously undetected attack method called NoFilter has been found to abuse the Windows Filtering Platform (WFP) to achieve privilege escalation in the Windows operating system. “If an attacker has the ability to execute code with admin privilege and the target is to perform LSASS Shtinkering, these privileges are not enough,” Ron Ben Yizhak, a security researcher at…
-
China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons [email protected] (The Hacker News)
An ongoing cyber attack campaign originating from China is targeting the Southeast Asian gambling sector to deploy Cobalt Strike beacons on compromised systems. Cybersecurity firm SentinelOne said the tactics, techniques, and procedures point to the involvement of a threat actor tracked as Bronze Starlight (aka Emperor Dragonfly or Storm-0401), which has been linked to the use of short-lived Read…
-
Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands Kevin Townsend
A new report from Rapid7 says a ransomware gang like Cl0p would easily be able to afford a bevy of zero-day exploits for vulnerable enterprise software. The post Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands appeared first on SecurityWeek. Read More
-
CISA, vendors warn Citrix ShareFile flaw under attack
Post ContentRead More