The emails encouraged recipients to download an Excel sheet which, once downloaded, launched a malicious software known as a Dridex that steals personal banking information and other login credentials. In reality, the payments are calculated and sent by the government automatically based on your taxes.  This is just the latest example of how the global coronavirus crisis has spawned more scams than any other event in the past decade.  “Pandemic-themed attacks remain ever-present, and we’ve…

UK security experts have warned online shoppers to be aware of scams ahead of Mothering Sunday this weekend. The National Cyber Security Center (NCSC), an offshoot of spy agency GCHQ, issued the notice yesterday, claiming that the mass shift to e-commerce during the pandemic has exposed more consumers to fraud. It gave no specific details of current campaigns to look out for, although cyber-criminals will usually tailor their efforts according to current events. Unsolicited emails and…

In this blog series, I will be putting the spotlight on useful Ghidra features you may have missed. Each post will look at a different feature and show how it helps you save time and be more effective in your reverse engineering workflows. Ghidra is an incredibly powerful tool, but much of this power comes from knowing how to use it effectively. The process of transforming source code into application binaries is a lossy process, but at least some…

Have you ever worked with a company that operates as “close to broken” as reasonably possible? Companies that follow that mindset usually do not have the most robust security practice, and they certainly will walk very close to the edge of compliance. Even if you don’t work in such a dysfunctional enterprise as described above, many companies still do not appreciate the interconnection of security and compliance. Both are often considered cost centers, and that paints a…

We urge organizations to patch Proxylogon (CVE-2021-26855) and related vulnerabilities (CVE-2021-26857, CVE-2021-26858, CVE-2021-27065) in Microsoft Exchange Server and investigate for potential compromise within their networks. Here’s how Tenable products can help. Background Following Microsoft’s out-of-band advisory for four zero-day vulnerabilities in Microsoft Exchange Server that were exploited in the wild by a nation-state threat actor known as HAFNIUM, multiple reports have emerged that over 30,000 organizations may have been compromised as a result of these…

Security chaos engineering helps you find holes in your cyber defenses before hackers do Length: 5:26 | Mar 8, 2021 This approach is all about data and resilience, not deliberately sabotaging your own network, according to two cybersecurity experts. Source link