Certified Information Systems Auditor (CISA)
Certified Information Systems Auditor (CISA) click here to read full Article Read More on latest Security Updates
Tagged: systems
HTTP header smuggling attack against AWS API Gateway exposes systems to cache poisoning
The header smuggling method by Daniel Thatcher creates a mutation in a header request designed to be sent through to backend infrastructure without being processed by a trusted frontend service. click here to read...
When it comes to securing systems against quantum computers, there is no one-size-fits-all solution
In addition to supply chain considerations for post-quantum cryptography, organizations need to address interoperability with partners, customers, and third-party service providers. click here to read full Article Read More on latest Security Updates
TeamTNT Uses New Sophisticated Techniques Against Docker Systems
The TeamTNT group has upped its game in recent times. Recently, it was found targeting Docker servers exposing Docker REST APIs for cryptomining purposes, under the campaign that was set off in October. Experts...
Covert-Control – Google Drive, OneDrive And Youtube As Covert-Channels – Control Systems Remotely By Uploading Files To Google Drive, OneDrive, Youtube Or Telegram
Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the...
Hive Ransomware’s New Variants Target Linux and FreeBSD Systems
ESET reported a new variant of the Hive ransomware that is targeting Linux and FreeBSD operating systems. Written in Go, the malware appears to be under development. Hive is known to target processes related to...
Reduce Security Risk of Healthcare Legacy Systems, Devices
Legacy systems’ lack of vendor support makes them particularly vulnerable to cyberattacks, says the Department of Health and Human Services’ Office for Civil Rights in a bulletin issued Friday. click here to read full...
Hive ransomware now encrypts Linux and FreeBSD systems
The Hive ransomware gang now also encrypts Linux and FreeBSD using new malware variants specifically developed to target these platforms. As per ESET, Hive’s new encryptors are still in development and still lack functionality....
Hackers are Disguising Malicious JavaScript Code Using Packers to Bypass Signature-based Detection Systems
Packers work by compressing or encrypting code to make that code unreadable and non-debuggable — resulting in ‘obfuscated’ code that is difficult for antivirus to detect. click here to read full Article Read more...
New SnapMC Threat Group Extorts Companies After Stealing Data from Systems at Rapid Pace
Fox-IT researchers said the group typically breaches company networks via vulnerabilities in web-facing software, with several intrusions linked to the exploitation of the Telerik ASP.NET framework. click here to read full Article Read more...
CISA Outlines Cyberthreats Targeting US Water and Wastewater Systems
Cybersecurity company Dragos worked with CISA, the FBI, the NSA and the EPA to outline cyberthreats targeting the information and operational technology underpinning the networks, systems and devices of US water and wastewater facilities....
Shift5 raises $20M to secure commercial and military transportation fleet systems
Shift5 raised $20 million in Series A funding led by 645 Ventures to provide enhanced cybersecurity and operational intelligence for today’s commercial fleet operators and military platforms. click here to read full Article Read...
New FontOnLake Malware Cripples Linux Systems
ESET unearthed a new malware strain, dubbed FontOnLake, that targets Linux systems and appears to have claimed a limited number of victims in Southeast Asia. The malware appears to boast sneaky nature and advanced...
US Systems of Medical Technology Firm Olympus Hit by Cyberattack Over the Weekend
Olympus, a medical technology company, was forced to take down IT systems in the Americas (U.S., Canada, and Latin America) following a cyberattack that hit its network Sunday, October 10, 2021. click here to...
Covert-Tube – Youtube As Covert-Channel – Control Systems Remotely And Execute Commands By Uploading Videos To Youtube
A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames...
Researchers Warn of FontOnLake Rootkit Malware Targeting Linux Systems
Cybersecurity researchers have detailed a new campaign that likely targets entities in Southeast Asia with a previously unrecognized Linux malware that’s engineered to enable remote access to its operators, in addition to amassing credentials...
