Author: Admin

The Razor’s Edge is a podcast series that examines “IT Services for the New Way to Work,” produced by CIO.com in partnership with HP Inc. In this series, HP’s technology experts provide unique insights into the challenges associated with digital transformation and discuss how innovative, cloud-based services, solutions, and software can help you plan and prepare for what lies ahead. The Razor’s Edge is hosted by Leif Olson, Distinguished Technologist at HP Inc., and he’s…

Hackers-for-hire specialize in compromising email boxes. Learn more about these cyber criminals and the threat they represent. Image: Adobe Stock Must-read security coverage In the world of illegal cyber activities, different kinds of threat actors exist. It has become increasingly common to read about companies selling offensive services like spyware as a service or commercial cyber surveillance. Some other actors are also government-backed. Yet another category of threat actors exists, dubbed hackers-for-hire. Google’s Threat Analysis…

Triggered by an employee from an external vendor who shared email addresses with an unauthorized party, the breach could lead to phishing attempts against affected individuals. Image: Proxima Studio/Adobe Stock NFT giant OpenSea is warning of a data breach that exposed the email addresses of users and subscribers to the company’s newsletter. In a notice published Wednesday, OpenSea revealed that anyone who shared their email address with the company in the past should assume that…

Microsoft’s Security Intelligence team has issued a new warning against a known cloud threat actor (TA) group. Tracked as 8220 and active since early 2017, the group would have now updated its malware toolset to breach Linux servers in order to install crypto miners as part of a long-running campaign. “The updates include the deployment of new versions of a cryptominer and an IRC bot, as well the use of an exploit for a recently…

Kaspersky security experts have discovered new malware targeting Microsoft Exchange servers belonging to several organizations worldwide. Dubbed “SessionManager” and first spotted by the company in early 2022, the backdoor enables threat actors to keep “persistent, update-resistant and rather stealth access to the IT infrastructure of a targeted organization.” According to Kaspersky, once propagated, SessionManager would enable a wide range of malicious activities, from collecting emails to complete control over the victim’s infrastructure.  The analyses by the…

CloudSEK used its artificial intelligence (AI)-powered digital risk platform XVigil to identify a post on a cybercrime forum mentioning open source automation server platform Jenkins as one of the TTP (tactics, techniques, and procedures) used by a threat actor (TA) in attacks against IBM and Stanford University. The module reportedly has hidden desktop takeover capabilities that would be used by the TA to get clicks on ads.  The post on the English-speaking forum was spotted by CloudSEK on…