Though the feds don’t cite any specific threat, a joint advisory from CISA, the FBI and the NSA offers advice on how to detect and mitigate cyberattacks sponsored by Russia. Image: iStock/Aterrassi Cyberattacks sponsored by hostile nation-states are always a major concern, for governments and organizations. Using advanced and sophisticated tactics, these types of attacks can inflict serious and widespread damage, as we’ve already seen in such incidents as the SolarWinds exploit. As such, organizations…

The European Union (EU) is planning a major supply chain cyber-attack simulation, it has been reported. According to Bloomberg, the exercise will take place in the coming days and continue for six weeks. The drill is designed to test member states’ preparedness for an attack affecting the continent’s distribution networks. Citing internal documents and sources “familiar with the matter,” Bloomberg said that the simulated attack will mainly target supply chains across Europe. The coordinated attack will be based…

The various threat intelligence stories in this iteration of the Anomali Cyber Watch discuss the following topics: APT, Data breach, Phishing, Ransomware and Vulnerabilities. The IOCs related to these stories are attached to Anomali Cyber Watch and can be used to check your logs for potential malicious activity. Figure 1 – IOC Summary Charts. These charts summarize the IOCs attached to this magazine and provide a glimpse of the threats discussed. Trending Cyber News and…

The Federal Bureau of Investigation (FBI) warns US companies that the FIN7 cybercriminals group is targeting the US defense industry with BadUSB devices. The US Federal Bureau of Investigation issued a flash alert to warn that the financially motivated group FIN7 has sent malicious USB devices, BadUSB devices, to US companies over the past few months to infect their systems with the malware. The gang is using weaponized USB devices with the LilyGO logo, which…

Prisma Access provides visibility, data protection, threat protection and control for Microsoft 365 enterprise customers SANTA CLARA, Calif., Jan. 12, 2022 /PRNewswire/ — Businesses are now expected to deliver exceptional user experiences to their employees — whether at work, home, or on the go — as well as to third parties and external customers. Many choose the leading enterprise cloud-enabled collaboration suite, Microsoft 365, to help accomplish this. Today, Palo Alto Networks (NASDAQ: PANW), the…

The campaign was first detected in October and is using services like AWS and Azure to hide its tracks and evade detection. Image: Shutterstock/Profit_Image Talos, Cisco’s cybersecurity research arm, reports it has detected a new malware campaign that is using public cloud infrastructure to host and deliver variants of three remote access trojans (RATs) while maintaining enough agility to avoid detection. The campaign, which Talos said began in late October 2021, has been seen primarily…