Security Boulevard

MAY 9, 2022

On April 19th of 2022, the FBI Cyber Division released a flash bulletin regarding the Blackcat ransomware-for-hire. It targets Active Directory to spread via GPO, primarily working with Windows administrative tools for spread, outside connection, and disabling security features like antivirus. Blackcat Ransomware.

Ransomware 98

Ransomware Antivirus Backups Passwords 98

eSecurity Planet

APRIL 19, 2023

Portnox is a private company that specializes in network access security with nearly 1,000 customers and closed a Series A fundraising with Elsewhere Partners for $22 million in 2022. authentication to gather endpoint information for reporting and enforcement. Agents Portnox does not require an agent.

IoT 98

IoT Authentication VPN Backups 98

Security Affairs

APRIL 25, 2022

The alert includes indicators of compromise (IoCs) associated with BlackCat/ALPHV, as of mid-February 2022. Regularly back up data, air gap, and password-protect backup copies offline. Review antivirus logs for indications they were unexpectedly turned off. Use multifactor authentication where possible.

Ransomware 98

Ransomware Antivirus Passwords Malware 98

eSecurity Planet

APRIL 6, 2023

In late 2022, Rackspace became a ransomware victim in one of the biggest cyberattacks ever suffered by a major cloud services vendor. LockBit uses a double extortion method and was responsible for roughly 40% of ransomware attacks in the first few months of 2022. Conti uses a double extortion method and a multithreading system.

Ransomware 98

Ransomware Backups Encryption Cybersecurity 98

Schneier on Security

FEBRUARY 28, 2024

In an August 2022 bulletin , Lloyd’s instructed its underwriters to exclude from all cyber insurance policies not just losses arising from war but also “losses arising from state backed cyber-attacks that (a) significantly impair the ability of a state to function or (b) that significantly impair the security capabilities of a state.”

Cyber Insurance 230

Cyber Insurance Insurance Government Cyber Risk 230

Krebs on Security

DECEMBER 29, 2022

Thanks to your readership and support, I was able to spend more time in 2022 on some deep, meaty investigative stories — the really satisfying kind with the potential to affect positive change. Some of that work is highlighted in the 2022 Year in Review review below. million users.

Cryptocurrency 239

Cryptocurrency Cybercrime Computers and Electronics Scams 239

SecureWorld News

SEPTEMBER 16, 2022

In February 2022, the actors exploited a Log4j vulnerability (likely CVE-2021-44228, CVE-2021-45046, and/or CVE-2021-45105) in a VMware Horizon application to gain access to the network of a U.S. The mitigation techniques include the following: Implement and Enforce Backup and Restoration Policies and Procedures. aerospace company.

Ransomware 85

Ransomware Government Encryption Antivirus 85

CyberSecurity Insiders

OCTOBER 25, 2022

Department of Health and Human Services HHS Breach Portal states that since the beginning of 2022, there have been at least 368 breaches affecting over 25.1 A solid cybersecurity posture is only as strong as its policies, backups and disaster plans. million patients. Implement Threat Awareness Training.

Healthcare 105

Healthcare Ransomware Social Engineering Identity Theft 105

eSecurity Planet

FEBRUARY 15, 2022

Also read: Top Vulnerability Management Tools for 2022. The agencies offered some sound cybersecurity advice for BlackByte that applies pretty generally: Conduct regular backups and store them as air-gapped, password-protected copies offline. Federal organizations will only have until February 24, 2022 to patch this vulnerability.

Ransomware 126

Ransomware Encryption Backups Accountability 126

eSecurity Planet

JANUARY 21, 2022

Also read: Top Vulnerability Management Tools for 2022. Also read: Best Incident Response Tools and Software for 2022. The steps also include quickly identifying and assessing unusual network behavior , running antivirus and anti-malware solutions on the network and testing backup procedures. Threats in a Connected World.

Malware 140

Malware Government Backups Ransomware 140

Malwarebytes

OCTOBER 1, 2023

Ransomware woes doubled by reinfection after improper remediation In November 2022, a small trades contractor in Alberta, Canada, received an alert for an elevated account running unauthorized commands and dumping credentials. By December 2022, they were encrypted with ransomware again. Small IT teams need something different.

Ransomware 94

Ransomware Small Business Passwords Malware 94

eSecurity Planet

NOVEMBER 7, 2022

Any bugs or glitches in its programming leaves noticeable trails for antivirus software to track. Take a Look at Top Threat Intelligence Platforms for 2022. It could also scan infected computers for antivirus software and alter its behavior to better avoid detection by that software. using strong authentication.

Firmware 114

Firmware Malware Antivirus Firewall 114

SecureList

JUNE 26, 2023

According to the Kaspersky cyber-resilience report , in 2022, four in ten employers admitted that a cybersecurity incident would be a major crisis for their business, superseded only by a slump in sales or a natural disaster. Fake e-mails were thoroughly crafted, so that the employees would not question their authenticity.

Cybercrime 90

Cybercrime Phishing Banking Malware 90

Security Boulevard

MARCH 25, 2022

In late January 2022, ThreatLabz identified an updated version of Conti ransomware as part of the global ransomware tracking efforts. This update was released prior to the massive leak of Conti source code and chat logs on Februrary 27, 2022. Conti command-line arguments updated in January 2022. Conclusion.

Ransomware 129

Ransomware Encryption Software Passwords 129

eSecurity Planet

MAY 2, 2024

Multi-factor authentication : Protects stolen credentials against use by requiring more than a simple username and password combination for access to resources. Passwordless authentication : Eliminates passwords in favor of other types of authentication such as passkeys, SSO, biometrics, or email access. 50% cloud targets.

Cybersecurity 119

Cybersecurity DDOS Penetration Testing Passwords 119

CyberSecurity Insiders

FEBRUARY 25, 2022

AT&T Alien Labs™ is writing this report about recently created ransomware malware dubbed BlackCat which was used in a January 2022 campaign against two international oil companies headquartered in Germany, Oiltanking and Mabanaft. Campaigns remain active, with 16 known incidents in February 2022 as of the publishing of this report.

Ransomware 119

Ransomware Encryption Malware Backups 119

Security Boulevard

MAY 3, 2022

A more recent Go-based variant was introduced around February 2022. Similar to other ransomware families, BlackByte deletes shadow copies to prevent a victim from easily recovering files from backups. This new variant introduced many additional features and updated the file encryption algorithms. Delete Shadow Copies. sqbcoreservice.

Encryption 75

Encryption Ransomware Antivirus Backups 75

Malwarebytes

APRIL 5, 2023

According to the 2022 State of EdTech Leadership Report , only one in five school districts (21 percent) have a dedicated cybersecurity professional on staff. Technicians are often dwarfed by the number of students, teachers, and devices under their charge, with IT to student ratios of 1:100+ or even 1:1,000+.

Education 63

Education Ransomware Cybersecurity Risk 63

eSecurity Planet

JUNE 17, 2021

From a GUI enterprise manager to advanced logical replication, backup and recovery, and a migration toolkit, EDB is a go-to vendor for all Postgre database administrators. McAfee is widely known for bringing the first antivirus software to market. Also Read: Top 9 Network Access Control (NAC) Solutions for 2021.

Firewall 117

Firewall Encryption Computers and Electronics Software 117

eSecurity Planet

MARCH 23, 2022

In 2022, Chinese researchers detected a decade-old backdoor introduced into the Linux operating system by an APT group associated with the U.S. Maintain effective endpoint security ( antivirus , EDR ). Implement multi-factor authentication (MFA). See the Best Backup Solutions for Ransomware Protection. Secure Assets.

Firewall 107

Firewall Malware Phishing Software 107

ForAllSecure

FEBRUARY 8, 2023

From her talk at SecTor 2022 , Paula Januszkiewicz, CEO of Cqure , returns to The Hacker Mind and explains how a lot of little configuration errors in common Windows tools and services can open the door to persistence on a system for bad actors and what sysadmins can do to mitigate these. So this is an attack for multi-factor authentication.

Software 40

Software Phishing Passwords Authentication 40