Lenny Zeltser

MAY 10, 2023

As you reflect on the past few years of work, determine which of the following categories fits you the most: Builder: You’re great at building a security program (or significant parts of it) from scratch. You can handle the politics. You enjoy defining the initial structure, standards, templates, processes, guardrails, and metrics.

CISO 66

CISO Technology Media Cybersecurity 66

Adam Shostack

SEPTEMBER 14, 2018

If you’re reading this blog, you may have seen that some people are nearly mad about threat modeling. They have become too skillful at techniques of selective inattention, junk categories, and situational control, techniques which they use to preserve the constancy of their knowledge-in-practice.

Engineering 200

Engineering Media Technology 200

Approachable Cyber Threats

AUGUST 10, 2022

Category Awareness, Case Study, Vulnerability. One such example of a successful nation state initiated DDoS attack used as a retaliatory tactic against a victim’s infrastructure and public services occurred in June 2022 in Lithuania, and is well documented and described by Elizabeth Montalbano in a June 2022 blog post at ThreatPost.

DDOS 98

DDOS Cyber Attacks Government Hacking 98

SecureList

FEBRUARY 15, 2021

This is very similar to the techniques of “Nigerian” scammers, who pose as real political figures or their relatives, offering tons of money, or otherwise link their messages with concurrent global events. Last year’s events affected the distribution of phishing attacks across the categories of targeted organizations.

Phishing 136

Phishing Malware Scams Accountability 136

Centraleyes

NOVEMBER 26, 2023

DEI is not merely a matter of political correctness or social justice within the cybersecurity realm. DEI is a moral imperative with numerous benefits, including improved creativity, innovation, productivity, and overall well-being in organizations and communities.

Cyber Risk 52

Cyber Risk Risk Cybersecurity Cyber threats 52

SiteLock

AUGUST 27, 2021

The most frequent visitor attacks in Q3 fell into one of four categories: SEO (search engine optimization) spam, redirects, defacements, and phishing kits. This content often includes an ideological or political message that could be off-putting to your customers.

Malware 52

Malware Engineering Phishing Accountability 52

Thales Cloud Protection & Licensing

AUGUST 30, 2018

California’s foray into privacy came as a result of two private citizens concerned about big businesses using consumers’ personal data for profit and the potential data breaches of consumer private data resulting in political or malicious exploitation. Right to know the categories of third parties with whom your data is shared.

Data breaches 54

Data breaches Data collection Data privacy Government 54

Digital Shadows

OCTOBER 19, 2022

Despite this, attacks on high-profile targets—as well as potentially politically motivated attacks—kept our eyes on ransomware this quarter. The lines between financially and politically motivated ransomware actors also blurred in Q3 2022, with government entities and private companies suffering the consequences.

Ransomware 52

Ransomware Government Marketing Healthcare 52

BH Consulting

MAY 25, 2022

This blog is here to guide you through topical trends to note as we enter GDPR’s fifth year. The EU Commission and President Joe Biden are eager for political alliance given recent global developments such as the Ukraine war. This can make it complicated for organisations to stay up to date with the ever-changing landscape.

Artificial Intelligence 97

Artificial Intelligence Marketing Government Technology 97

McAfee

SEPTEMBER 14, 2021

McAfee customers are protected from the malware/tools described in this blog. A more detailed blog with specific recommendations on using the McAfee portfolio and integrated partner solutions to defend against this attack can be found here. We will highlight a few in each category. One of the tools was “RottenPotato”.

Malware 144

Malware DNS Accountability Manufacturing 144

SecureList

APRIL 24, 2023

In this blog post, we’re excited to share what we now know of Tomiris with the broader community, and discuss further evidence of a possible connection to Turla. Tools used by Tomiris fall into three categories: Downloaders, rudimentary malicious programs whose role is to deploy a backdoor or required additional legitimate tools.

Malware 89

Malware DNS Government Software 89

BH Consulting

JANUARY 26, 2023

These are: The Digital Services Act The Digital Markets Act The EU Data Act The Data Governance Act The Artificial Intelligence (AI) Act In our previous blog series (part one and part two ) we discussed four of the five new Directives, and how they will affect organisations. Now let’s turn our attention to the fifth one from the list above.

Artificial Intelligence 59

Artificial Intelligence Marketing Risk Education 59

SecureList

MAY 12, 2021

They may also impose restrictions on certain nationalities based on their political views. If the victim decides not to pay their ransom, the REvil operators will start publishing the sensitive data of the attacked company on the.onion Happy Blog site. These are just some of the ways operators try to ensure their security.

Ransomware 123

Ransomware Encryption Malware Cybercrime 123

ForAllSecure

MAY 2, 2023

That, of course, was not all, but it is an example of how someone -- anyone on the internet -- can take a photo or blog post or Yelp review from social media, or some other seemingly random open source item and tie it back to a crime. And we're never going to be good at blogging. It's all for him. It's very narcissistic.

Hacking 40

Hacking Media InfoSec Internet 40

SecureList

JULY 28, 2022

In March, Proofpoint published a blog post about a new spear-phishing campaign related to the war in Ukraine, tentatively attributed to the Russian-speaking actor UNC1151 (aka TA445 and Ghostwriter). As part of this process, the actor abused a legitimate blog service to host a malicious script with an encoded format.

Malware 130

Malware Firmware Phishing Cryptocurrency 130

Lenny Zeltser

MAY 3, 2019

Political campaigns are targets of cybercriminals and nation-state adversaries, who possess formidable persistence and expertise. If you’re participating in a political campaign, the best publicly available starting point is the Cybersecurity Campaign Playbook from the Defending Digital Democracy project.

Cybersecurity 111

Cybersecurity Social Engineering Authentication Software 111

Elie

AUGUST 5, 2018

Impact by category. Which categories (e.g., Most impacted users per category. Which users in each popular category (Politics, News, Website …) lost the most users or the largest percentage of their followers base. Each category has between ~300 and ~50 users. Politics groups U.S. Most impacted users.

Accountability 90

Accountability Internet Internet Data collection 90

Elie

AUGUST 5, 2018

Impact by category. Which categories (e.g., Most impacted users per category. Which users in each popular category (Politics, News, Website …) lost the most users or the largest percentage of their followers base. Each category has between ~300 and ~50 users. Politics groups U.S. Most impacted users.

Accountability 90

Accountability Internet Internet Data collection 90

Krebs on Security

OCTOBER 5, 2018

Amazon also penned a blog post that more emphatically stated their objections to the Bloomberg piece. government and Silicon Valley somehow mustered the funding and political will to do that, insisting that products sold to U.S. ” The story continues: Today, Supermicro sells more server motherboards than almost anyone else.

Computers and Electronics 224

Computers and Electronics IoT Manufacturing Technology 224

SecureList

NOVEMBER 14, 2022

Last June, Google’s TAG team released a blog post documenting attacks on Italian and Kazakh users that they attribute to RCS Lab, an Italian offensive software vendor. In line with our predictions, we released two blog posts in 2022 introducing sophisticated low-level bootkits. at country level, by relying on national ISPs).

Firmware 106

Firmware Surveillance Mobile Telecommunications 106