CyberSecurity Insiders

MARCH 13, 2021

Stories from the SOC is a blog series that describes recent real-world security incident investigations conducted and reported by the AT&T SOC analyst team for AT&T Managed Threat Detection and Response customers. The post Stories from the SOC – DNS recon + exfiltration appeared first on Cybersecurity Insiders.

DNS 54

DNS Threat Detection Cybersecurity Cyber threats 54

Security Boulevard

FEBRUARY 23, 2023

Thankfully, nearly all malware depends on DNS at some point in their kill chain, making the protocol a critical vector for shutting down these threats. Some of the common forms these DNS-based attacks can take include: DNS spoofing: A malicious actor alters DNS records to redirect traffic to a fake website or server.

Antivirus 98

Antivirus DNS Threat Detection Small Business 98

Security Boulevard

MARCH 6, 2024

Traditionally, cybersecurity has been a reactive game: We respond to cyber threats as they arise, analyze the incidents, add pertinent information to “deny lists”, and update stakeholders on “what happened.” That's where technologies like protective DNS come in. It may sound difficult, but change always sounds hard at first.

DNS 86

DNS Phishing Data breaches Cyber threats 86

Security Boulevard

MAY 20, 2024

Weekly Threat Intelligence Report Date: May 20, 2024 Prepared by: David Brunsdon, Threat Intelligence - Security Engineer, HYAS Cyber Threat Intelligence Analysis This week in the HYAS Insight threat intelligence platform, we found a concerning open directory hosting multiple pieces of malware. Malware Analysis 1.

DNS 59

DNS Malware Education Phishing 59

Security Boulevard

APRIL 18, 2024

The timing of this collaboration is particularly significant, given the escalating cyber threats facing organizations across the region. With cyber attacks becoming increasingly sophisticated and frequent, there is an urgent need for proactive defense mechanisms that adapt to evolving threats in real-time.

Digital transformation 64

Digital transformation Architecture Cyber threats DNS 64

CyberSecurity Insiders

APRIL 14, 2023

This is the second blog in the series focused on PCI DSS, written by an AT&T Cybersecurity consultant. See the first blog relating to IAM and PCI DSS here. There are several issues implied in the PCI DSS Standard and its associated Report on Compliance which are rarely addressed in practice.

Penetration Testing 102

Penetration Testing DNS Passwords Accountability 102

CyberSecurity Insiders

DECEMBER 16, 2021

According to a Netlab blog on December 13, 2021, Netlab identified 10 different implants using the vulnerability to spread: Muhstik, DDoS+backdoor. rmi|dns):/[^n]+' /var/log. Review detections of suspicious child processes spawned by Java. We can observe the growth of JNDI related scans cross the internet: Figure 1.

DDOS 104

DDOS DNS Internet Internet 104