Category: Uncategorized
-
Cosmetics Giant Estée Lauder Targeted by Two Ransomware Groups Eduard Kovacs
Estée Lauder has confirmed suffering a data breach just as two ransomware groups claimed to have targeted the company, both allegedly stealing vast amounts of information. The post Cosmetics Giant Estée Lauder Targeted by Two Ransomware Groups appeared first on SecurityWeek. Read More
-
Human Cyber-Risk Can Be Demonstrably Mitigated by Behavior Changing Training: Analysis Kevin Townsend
While traditional security awareness teaches users how to recognize social engineering, new behavior changing trains the brain on the correct recognition and response to phishing. The post Human Cyber-Risk Can Be Demonstrably Mitigated by Behavior Changing Training: Analysis appeared first on SecurityWeek. Read More
-
North Korean State-Sponsored Hackers Suspected in JumpCloud Supply Chain Attack [email protected] (The Hacker News)
An analysis of the indicators of compromise (IoCs) associated with the JumpCloud hack has uncovered evidence pointing to the involvement of North Korean state-sponsored groups, in a style that’s reminiscent of the supply chain attack targeting 3CX. The findings come from SentinelOne, which mapped out the infrastructure pertaining to the intrusion to uncover underlying patterns. It’s worth notingRead…
-
Multiple DDoS Botnets Exploiting Recent Zyxel Vulnerability Ionut Arghire
Multiple DDoS botnets have been observed targeting CVE-2023-28771, a Zyxel firewall vulnerability patched in April. The post Multiple DDoS Botnets Exploiting Recent Zyxel Vulnerability appeared first on SecurityWeek. Read More
-
P2PInfect: New Peer-to-Peer Worm Targeting Redis Servers Ionut Arghire
The Rust-based peer-to-peer worm ‘P2PInfect’ is targeting a Lua sandbox escape vulnerability in internet-accessible Redis servers. The post P2PInfect: New Peer-to-Peer Worm Targeting Redis Servers appeared first on SecurityWeek. Read More
-
Cyber insurers adapting to data-centric ransomware threats
Post ContentRead More
-
Turla’s New DeliveryCheck Backdoor Breaches Ukrainian Defense Sector [email protected] (The Hacker News)
The defense sector in Ukraine and Eastern Europe has been targeted by a novel .NET-based backdoor called DeliveryCheck (aka CAPIBAR or GAMEDAY) that’s capable of delivering next-stage payloads. The Microsoft threat intelligence team, in collaboration with the Computer Emergency Response Team of Ukraine (CERT-UA), attributed the attacks to a Russian nation-state actor known as Turla, which isRead More
-
Adobe Releases New Patches for Exploited ColdFusion Vulnerabilities Eduard Kovacs
Adobe releases a second round of patches for recent ColdFusion vulnerabilities, including flaws that have been exploited in attacks. The post Adobe Releases New Patches for Exploited ColdFusion Vulnerabilities appeared first on SecurityWeek. Read More
-
New P2PInfect Worm Targeting Redis Servers on Linux and Windows Systems [email protected] (The Hacker News)
Cybersecurity researchers have uncovered a new cloud targeting, peer-to-peer (P2P) worm called P2PInfect that targets vulnerable Redis instances for follow-on exploitation. “P2PInfect exploits Redis servers running on both Linux and Windows Operating Systems making it more scalable and potent than other worms,” Palo Alto Networks Unit 42 researchers William Gamazo and Nathaniel Quist said. “ThisRead More
-
Microsoft Expands Cloud Logging to Counter Rising Nation-State Cyber Threats [email protected] (The Hacker News)
Microsoft on Wednesday announced that it’s expanding cloud logging capabilities to help organizations investigate cybersecurity incidents and gain more visibility after facing criticism in the wake of a recent espionage attack campaign aimed at its email infrastructure. The tech giant said it’s making the change in direct response to increasing frequency and evolution of nation-state cyberRead More