article thumbnail

Avoslocker ransomware gang targets US critical infrastructure

Security Affairs

In some cases, the gang also threatened and conducted distributed denial-of-service (DDoS) attacks during negotiations. In some cases, AvosLocker negotiators also threaten and launche distributed denial-of-service (DDoS) attacks during negotiations, likely when the victims are not cooperating, to convince them to comply with their demands.

article thumbnail

Emerging Trends in Cybersecurity: Strategies to Combat Cyber Extortion Attacks on Businesses in 2023

Cytelligence

In addition, Distributed Denial of Service (DDoS) attacks, Business Email Compromise (BEC), and phishing scams continue to pose significant threats. Implementing advanced endpoint security measures, such as multi-factor authentication, encryption, and regular patching and updating of software, can significantly reduce the risk of attacks.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Portnox Cloud: NAC Product Review

eSecurity Planet

authentication to gather endpoint information for reporting and enforcement. Agents Portnox does not require an agent. Agentless options use root certificates, simple certificate enrollment protocol (SCEP), Microsoft InTune integration, and EAP-TLS 802.1x

IoT 93
article thumbnail

Bad Luck: BlackCat Ransomware Bulletin

Security Boulevard

It targets Active Directory to spread via GPO, primarily working with Windows administrative tools for spread, outside connection, and disabling security features like antivirus. However, they also use some less common tactics, like threats of DDoS and discounts for fast payment, both of which play directly on a victim’s initial panic.

article thumbnail

Vulnerability Recap 4/15/24 – Palo Alto, Microsoft, Ivanti Exploits

eSecurity Planet

You can strengthen your cybersecurity defenses by using reliable antivirus software, firewalls, intrusion detection systems, and virtual private networks (VPNs). Employ robust password management techniques, two-factor authentication (2FA), and regular backups of essential data.

article thumbnail

API Security and Hackers: What?s the Need?

Security Affairs

Authentication. To increase the complexity of hacking your device, always get to know who is calling your APIs, by using a simple access authentication (user/password) or an API key (asymmetric key). The authorization and/or authentication of your APIs should be delegated. Don’t communicate with strangers. Encryption.

article thumbnail

Cyber Best Practices for Overseas Asset Security

SecureWorld News

If you can mandate strong password policies and multi-factor authentication (MFA) for systems and data, you'll work wonders in preserving valuable data in transit. Enforce enterprise-grade antivirus, firewalls, and internet security software across all connected devices.