Troy Hunt

NOVEMBER 12, 2022

What a week to pick to be in Canberra. Planned well before things got cyber-crazy in Australia, I spent a few days catching up with folks in our capital and talking to the Australia Federal Police for scam awareness week. References Mastodon has been. References Mastodon has been. by some unexplainable miracle, 100% of feedback has been positive! )

Scams 217

Scams 217

Troy Hunt

JULY 11, 2021

I got my 11th MVP award this week (being welcomed into the MVP program was the turning point of my career and it remains enormously special to me 😊) Sponsored by: Varonis. Between school holidays and a house full of tradies repairing things, there wasn't a lot a free time this week.

IoT 292

IoT Encryption Government 292

Troy Hunt

DECEMBER 24, 2021

On reflection, I feel like this is the first major step towards HIBP growing up and becoming self-sufficient; that Pwned Passwords piece is now owned by the community, supported by the community, contributed to by 2 of the world's foremost law enforcement agencies and used somewhere way north of 1.26 billion times a month.

Passwords 235

Passwords 235

Troy Hunt

APRIL 14, 2022

5 years later, still all true) RaidForums is no more (and just like that, something else has stepped in and taken its place) The North Macedonian government has become the 32nd to get access to HIBP APIs for monitoring and querying their gov domains (that's the third one in a row from that region of the world) Sponsored by: Detack.

Passwords 245

Passwords Government 245

Security Boulevard

NOVEMBER 29, 2023

The half-dozen or so state-sponsored cyberthreat groups associated with North Korea have become more adaptable and flexible since the COVID-19 pandemic, expanding their targets and campaigns and.

Data privacy 67

Data privacy Malware Cybersecurity Network Security 67

Kali Linux

FEBRUARY 27, 2024

Another important difference with traditional mirrors is that those machines are not managed by the sponsor (the organization that funds the mirror). Usually, a sponsor provides the bandwidth, the mirror, and also administrates it. Usually, a sponsor provides the bandwidth, the mirror, and also administrates it.

Software 145

Software Firmware VPN Internet 145

Security Boulevard

MAY 25, 2022

As state-sponsored threat actors collaborate with financially-motivated cybercriminals to launch targeted cyberattacks against critical infrastructures, the cyberthreat landscape has become a free-for-all arena. The Russia–Ukraine conflict has significantly intensified the cyberthreat landscape.

Cybersecurity 112

Cybersecurity Network Security 112

Troy Hunt

DECEMBER 11, 2021

it now looks like this will become a repeatable Xmas present for friends) I didn't hit 200k Twitter followers by this video. Sponsored by: 1Password is a secure password manager and digital wallet that keeps you safe online. Geez, I'm a bit orange today! I think mucking around with the (excepti0nally cool!)

Password Management 220

Password Management Surveillance Passwords 220

Security Boulevard

APRIL 23, 2021

According to Microsoft, they have attributed the attack to a group called Hafnium, which they describe as a being “state sponsored and operating out of China.”. The post When a Ripple Becomes a Wave: Cyberattack Fallout appeared first on Security Boulevard.

Cybersecurity 130

Cybersecurity 130

Troy Hunt

APRIL 3, 2020

it's just all becoming a blur. I know I was at home so. But be that as it may, life marches on and this week like every other one before it was full of interesting cyber-things. More on that and a bunch of other things in this week's update. References Get Pluralsight for free for all of April! Redefining security analytics.

Accountability 212

Accountability Hacking 212

Thales Cloud Protection & Licensing

APRIL 13, 2023

As quantum computing becomes more widespread, standard public key cryptography will become vulnerable to data hacks. Additionally, anything relying on this same cryptographic integrity (such as IoT devices, code signing, or other applications) will also become exposed.

IoT 127

IoT Marketing Risk Encryption 127

SecureWorld News

OCTOBER 31, 2022

Persistent ransomware threats, increasing risk to critical infrastructure, state-sponsored activity, more bad actors, and new, disruptive technologies are the five cyber threat narratives noted in the National Cyber Threat Assessment 2023-2024 recently released by the Canadian Centre for Cyber Security.

Cyber threats 75

Cyber threats Consumer Services Technology Cybercrime 75

CyberSecurity Insiders

APRIL 23, 2023

In recent years, the term “offensive cyber capabilities” has become increasingly common in discussions around national security and military strategies. Offensive cyber capabilities refer to the ability of a nation or organization to launch cyber attacks on other countries, groups, or individuals.

Cyber Attacks 121

Cyber Attacks Technology Government Ransomware 121

Schneier on Security

SEPTEMBER 24, 2021

At the top of the food chain are the government-sponsored hackers. At the top of the food chain are the government-sponsored hackers. That suggests defenders are becoming better at catching hackers in the act. That suggests defenders are becoming better at catching hackers in the act. ” […].

Hacking 260

Hacking Government Technology Ransomware 260

SecureWorld News

APRIL 25, 2024

The default mode for faults is that the lights stay on to ensure that roads are not left completely unlit and become a safety concern. "The The default mode for faults is that the lights stay on to ensure that roads are not left completely unlit and become a safety concern.

Cyber Attacks 61

Cyber Attacks Energy and Utilities Cyber Risk Risk 61

Graham Cluley

APRIL 19, 2022

Graham Cluley Security News is sponsored this week by the folks at Indusface. With APIs grown into a dominant mechanism of the modern web, protecting web applications and APIs becomes the default requirement of AppSec. Thanks to the great team there for their support! This calls for a unified risk-based mitigation solution.

Risk 75

Risk 75

Joseph Steinberg

OCTOBER 4, 2021

Since then, technological advances have transformed the world in previously unimaginable ways; with such progress, however, a situation emerged in which basic cybersecurity knowledge has become essential for a person to survive and flourish in the modern world. This post sponsored by @Netscout. Cybersecurity Awareness Month is Here!

Education 130

Education Cybersecurity Artificial Intelligence Government 130

SiteLock

AUGUST 27, 2021

We are excited to announce that SiteLock is a WordCamp Global Community Sponsor this year! After sponsoring 17 WordCamps and attending 40 in 2016, becoming a 2017 global sponsor was an obvious next step for us, and we look forward to expanding our support within the community this year! Why WordPress is Important to Us.

Education 98

Education Internet Internet 98

CSO Magazine

JUNE 11, 2021

HP recently announced the findings of a new study – Nation States, Cyberconflict, and the Web of Profit – showing that nation state cyberattacks are becoming more frequent, varied, and open, moving us closer to a point of “advanced cyberconflict” than at any time since the inception of the internet.

Media 120

Media Internet Internet Government 120

Joseph Steinberg

APRIL 21, 2022

Yet, it is important to understand that, if deployed without proper planning or otherwise utilized improperly, encryption can also become a dangerous double-edged sword; it can sometimes even detract from information security rather than enhance it. VMware sponsored this post.

Encryption 309

Encryption Cybersecurity Artificial Intelligence Backups 309

Security Affairs

NOVEMBER 19, 2020

Canada Centre for Cyber Security warns of risks related to state-sponsored programs from China, Russia, Iran, and North Korea. “The most sophisticated capabilities belong to state sponsored cyber threat actors who are motivated by economic, ideological, and geopolitical goals,” the center said. ” reads the report.

Cyber threats 115

Cyber threats Government Hacking Risk 115

Troy Hunt

JANUARY 3, 2020

It somehow seems to just be reflective of how crazy online security is becoming in the modern era. Here's how the whole washing machine SSID thing panned out when I first connected to it (I have since never - not once - gotten any value out of it being connected) Sponsored by Varonis. Hope you enjoy the first update of 2020 ??

Passwords 141

Passwords 141

SecureWorld News

DECEMBER 14, 2023

Chinese-sponsored state actors play with different rules. These incidents highlight the inadequacy of conventional, static defense mechanisms like firewalls and antivirus software against sophisticated state-sponsored attacks. infrastructure, such as power grids, water utilities, and transportation networks. infrastructure.

Antivirus 105

Antivirus Cybersecurity Risk Government 105

Malwarebytes

APRIL 9, 2024

The malicious ads are displayed as sponsored results on Google’s search engine page and localized to North America. Yet, the threat has become prevalent enough to warrant better user education. Victims are tricked into downloading and running the Nitrogen malware masquerading as a PuTTY or FileZilla installer. dll (Nitrogen).

System Administration 105

System Administration DNS Engineering Social Engineering 105

Troy Hunt

MARCH 18, 2024

Let me explain: Firstly, just as a primer if you're new to this story, read BleepingComputer's piece on the incident. From that story: From the samples shared by the threat actor, the database contains customers' names, addresses, phone numbers, Social Security numbers, and date of birth. For my part, I've got 4.8M

Data breaches 346

Data breaches Encryption Identity Theft InfoSec 346

CyberSecurity Insiders

AUGUST 5, 2021

As more and more companies are becoming soft targets for ransomware spreading gangs, United States is all set to knock the doors of big technology companies like Amazon, Google, and Microsoft to offer protecting collaboratively. But the bad news is that none of the info provided were related to any state sponsored attacks.

Ransomware 119

Ransomware Cyber Attacks Government Cybersecurity 119

Troy Hunt

JANUARY 24, 2020

HIBP also hit the 3M subscriber mark this week and Scott is lamenting how slow his browsing experience has become without his Pi-hole. Sponsored by: SecurityFWD. I've had heaps of dramas in the past with recordings being lost and the first time I do a 3-person weekly update only 2 of them recorded (mine being the exception).

Firmware 222

Firmware Mobile 222

WIRED Threat Level

DECEMBER 18, 2019

Thirty years ago, Cliff Stoll published The Cuckoo's Egg, a book about his cat-and-mouse game with a KGB-sponsored hacker. Today, the internet is a far darker place—and Stoll has become a cybersecurity icon.

Internet 80

Internet Internet Cybersecurity 80

SecureWorld News

JULY 25, 2023

Researchers were able to attribute the breach to the RGB due to a significant operational security (OpSec) oversight on the part of the hackers, which has raised concerns about the evolving cyber offensive capabilities of state-sponsored threat actors. An organization's Identity layer serves as the new perimeter.

Cryptocurrency 67

Cryptocurrency VPN Cybercrime Engineering 67

Malwarebytes

FEBRUARY 1, 2024

The Internal Revenue Service has announced that the 2024 tax filing season has officially begun, with an expected 146 million individual tax returns to be filed. While it is costly and complex for the IRS to process so many digital and paper documents, it can also be a headache for many Americans. Both have the same template.

Scams 108

Scams Advertising Software Engineering 108

Security Boulevard

AUGUST 30, 2022

Lloyd's Backs Off Insurance for State-Sponsored Cyberattacks. issued a market bulletin dated August 16, 2022 setting out new rules for standalone cyber-attack policies that would exclude coverage for damages from state-sponsored attacks. brooke.crothers. Tue, 08/30/2022 - 15:00. Cyber related businesses are ‘evolving risk’.

Insurance 95

Insurance Cyber Attacks Government Marketing 95

CyberSecurity Insiders

AUGUST 26, 2022

It also added in its latest update that such threats are causing systemic risks to the entire insurance market and, to mitigate the risks, it has excluded state-sponsored cyber attacks from its coverage policy. All insurance companies exclude the risks inferred from war like situations.

Cyber Insurance 90

Cyber Insurance Insurance Cyber Attacks Risk 90

CSO Magazine

FEBRUARY 15, 2022

The ShadowPad malware came into the spotlight in 2017 when it was used in two software supply-chain attacks by a suspected Chinese state-sponsored hacker group. Given the range of groups leveraging ShadowPad, all organizations that are likely targets for Chinese threat groups should monitor for TTPs associated with this malware."

Malware 72

Malware Software 72

CyberSecurity Insiders

JANUARY 25, 2023

According to recent threat intelligence from SonicWall, global ransomware attempts declined 31% YoY as cybercriminals and nation-state actors opted for never-before-seen malware variants, IoT malware, and cryptojacking in attacks motivated by financial gain and state-sponsored hacktivism.

Cyber threats 127

Cyber threats Cybercrime Healthcare IoT 127

Security Affairs

NOVEMBER 24, 2021

The steps Apple is taking today will send a clear message: in a free society, it is unacceptable to weaponize powerful state-sponsored spyware against innocent users and those who seek to make the world a better place. Apple also plans to notify and assist users of state-sponsored attacks. link] — Ivan Krsti?

Spyware 95

Spyware Surveillance Software Hacking 95

Troy Hunt

JUNE 21, 2019

Project Svalbard is forging ahead (it's becoming increasingly demanding, but it's also a very exciting time) Varonis is sponsoring my blog again this week (check out their Varonis DFIR team investigating a cyberattack using their data-centric security stack).

158

158

CyberSecurity Insiders

FEBRUARY 16, 2021

The intelligence committee, funded by South Korea’s National Assembly, has revealed that a cyber attack launched on Pfizer at the end of last year was launched by North Korean hackers to steal the intelligence of vaccine research that was co-sponsored by BioNTech.

Cyber Attacks 144

Cyber Attacks Insurance Backups Encryption 144