The Hacker News

JANUARY 28, 2023

The threat actors associated with the Gootkit malware have made "notable changes" to their toolset, adding new components and obfuscations to their infection chains. Google-owned Mandiant is monitoring the activity cluster under the moniker UNC2565, noting that the usage of the malware is "exclusive to this group.

Malware 133

Malware 133

Bleeping Computer

JANUARY 28, 2023

Security researchers have identified a new data-wiping malware they named SwiftSlicer that aims to overwrite crucial files used by the Windows operating system. [.

Malware 127

Malware 127

Security Boulevard

JANUARY 28, 2023

There were a number of significant activities in January 2023 related to FedRAMP, StateRAMP and CMMC 2.0 marketplace. As part of the FedRAMP Authorization Act, The General Services Administration (GSA) issued a call for nominations for the Federal Secure Cloud Advisory Committee (FSCAC). FSCAC is a statutory advisory committee in accordance with the provisions of […] The post Jan 2023 – FedRAMP, StateRAMP and CMMC 2.0 Roundup appeared first on Security Boulevard.

122

122

The Hacker News

JANUARY 28, 2023

Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster the environment, such as enabling Windows Extended Protection and configuring certificate-based signing of PowerShell serialization payloads. "Attackers looking to exploit unpatched Exchange servers are not going to go away," the tech giant's Exchange Team said in a post.

102

102

Speaker: Erroll Amacker

Automation is transforming finance but without strong financial oversight it can introduce more risk than reward. From missed discrepancies to strained vendor relationships, accounts payable automation needs a human touch to deliver lasting value. This session is your playbook to get automation right. We’ll explore how to balance speed with control, boost decision-making through human-machine collaboration, and unlock ROI with fewer errors, stronger fraud prevention, and smoother operations.

Risk

Security Affairs

JANUARY 28, 2023

Russia-linked Sandworm APT group is behind a new Golang-based wiper, tracked as SwiftSlicer, that hit Ukraine, ESET reports. Researchers from ESET discovered a new Golang-based wiper, dubbed SwiftSlicer, that was used in attacks aimed at Ukraine. The experts believe that the Russia-linked APT group Sandwork (aka BlackEnergy and TeleBots ) is behind the wiper attacks.

Telecommunications 98

Telecommunications Malware Hacking Ransomware 98

Security Boulevard

JANUARY 28, 2023

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Security ’22 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Security ’22 – Lei Xue, Yangyang Liu, Tianqi Li, Kaifa Zhao, Jianfeng Li, Le Yu, Xiapu Luo, Yajin Zhou, Guofei Gu – ‘SAID: State-Aware Defense Against Injection Attacks On In-Vehicle Network’ appeared first on Security Boulevard.

Education 98

Education InfoSec Cybersecurity 98

The Hacker News

JANUARY 28, 2023

The use of software as a service (SaaS) is experiencing rapid growth and shows no signs of slowing down. Its decentralized and easy-to-use nature is beneficial for increasing employee productivity, but it also poses many security and IT challenges. Keeping track of all the SaaS applications that have been granted access to an organization's data is a difficult task.

Software 98

Software Risk 98

Security Affairs

JANUARY 28, 2023

The latest BIND updates patch multiple remotely exploitable vulnerabilities that could lead to denial-of-service (DoS). BIND is a suite of software for interacting with the Domain Name System (DNS) maintained by the Internet Systems Consortium (ISC). The ISC released security patches to address multiple high-severity denial-of-service DoS vulnerabilities in the DNS software suite.

DNS 98

DNS Software Hacking Internet 98

Malwarebytes

JANUARY 28, 2023

On January 26, 2023, the United States Department of Justice (DoJ) released details about a disruption campaign against the Hive ransomware group. The disruption campaign has reportedly had access to Hive's infrastructure since July of 2022. Its access became public on Thursday when Hive's dark web began showing a notice that “this hidden site has been seized.

Ransomware 97

Ransomware Phishing Government Risk 97

WIRED Threat Level

JANUARY 28, 2023

Plus: Hive ransomware gang gets knocked offline, FBI confirms North Korea stole $100 million, and more.

Ransomware 96

Ransomware Hacking 96

Advertisement

Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.

Cyber threats

Bleeping Computer

JANUARY 28, 2023

Security researchers with Horizon3's Attack Team will release next week an exploit targeting a vulnerability chain for gaining remote code execution on unpatched VMware vRealize Log Insight appliances. [.

87

87

Security Boulevard

JANUARY 28, 2023

The past three years have seen an onslaught of cybercrime and acceleration in advanced technology across industries around the world. With the parallel rise of these behemoths, consumers have been put under the spotlight and at greater risk than before; … What’s Now, What’s Next? A Deep Dive into Privacy Legislation in 2023 Read More » The post What’s Now, What’s Next?

Cybercrime 85

Cybercrime Technology Risk Data privacy 85