Author: Admin

On February 8, the world learned about a digital attack at the water treatment plant serving the 15,000-person City of Oldsmar, Florida. An operator at the water treatment plant observed someone remotely take control of his mouse and use it to change the setting of sodium hydroxide within the water from 100 parts per million (ppm) to 11,100 ppm. This change could have endangered public health if the operator had not immediately undone the attacker’s…

Microsoft released fixes for over 80 CVEs in yesterday’s Patch Tuesday update round, including a zero-day bug and several publicly disclosed vulnerabilities. In a week dominated by the exploitation on a massive scale of four zero-day Exchange Server flaws patched out-of-band by Microsoft last week, there’s yet more to do for sysadmins. The first is yet another zero-day, this time in Internet Explorer. “CVE-2021-26411 is a memory corruption vulnerability that could allow an attacker to target…

MITRE ATT&CK enterprise is a “knowledge base of adversarial techniques”.   In a Security Operations Center (SOC) this resource is serving as a progressive framework for practitioners to make sense of the behaviors (techniques) leading to system intrusions on enterprise networks. This resource is centered at how SOC practitioners of all levels can craft purposeful defense strategies to assess the efficacy of their security investments against that knowledge base. To enable practitioners in operationalizing these strategies,…

The emails encouraged recipients to download an Excel sheet which, once downloaded, launched a malicious software known as a Dridex that steals personal banking information and other login credentials. In reality, the payments are calculated and sent by the government automatically based on your taxes.  This is just the latest example of how the global coronavirus crisis has spawned more scams than any other event in the past decade.  “Pandemic-themed attacks remain ever-present, and we’ve…

Scammers are launching more malicious campaigns designed to take advantage of the anxiety and confusion over the COVID-19 vaccines. Image: iStock The rollout of coronavirus vaccines around the world is certainly welcome news following a year grappling with the deadly pandemic. But vaccine deployment has encountered bumps in the road as many people are still uncertain over when, where and how to get their shots. That confusion has been ripe for exploitation by cybercriminals, triggering…