cybersecurity

Sandworm, a Russian Threat Actor, Disrupted Power in Ukraine Via Cyberattack

Posted on by Admin
Sandworm, a Russian Threat Actor, Disrupted Power in Ukraine Via Cyberattack

Any company that is strategic could be targeted for the same kind of actions as this cyberattack. Follow these tips to mitigate your company’s risk to this cybersecurity threat. Mandiant, a cybersecurity company owned by Google, has revealed the details of a 2022 cyberattack run by Russian threat actor Sandworm. The threat actor compromised a Ukrainian critical infrastructure organization to manipulate its operational technology environment, resulting in a power outage that coincided with mass missile…

Read More

Australian Nonprofit Cyber Security Is So Poor It Might Be Affecting Donations

Posted on by Admin
Australian Nonprofit Cyber Security Is So Poor It Might Be Affecting Donations

Image: Adobe/immimagery The not-for-profit sector is one of Australia’s biggest employers and revenue sources. 1.4 million people work in the not-for-profit sector in Australia, and another 3.2 million people volunteer. The overall revenue of the sector is $190 billion, and that money goes directly into supporting critical causes across the country. Unfortunately, according to new research by Infoxchange, the sector is ill-equipped to handle the security requirements of modern IT environments, and that is not…

Read More

Microsoft and SysAid Find Clop Malware Vulnerability

Posted on by Admin
Microsoft and SysAid Find Clop Malware Vulnerability

SysAid has patched a zero-day vulnerability that could allow attackers to exfiltrate data and launch ransomware. On Nov. 8, SysAid, an Israel-based IT service management software company, reported a potentially exploited zero-day vulnerability in their on-premises software. Users of their on-premises server installations were encouraged to run version 23.3.36, which contained a fix. Microsoft Threat Intelligence analyzed the threat and found that Lace Tempest had exploited it. The vulnerability was exploited by the threat group…

Read More

Google Cloud’s Cybersecurity Trends to Watch in 2024 Include Generative AI-Based Attacks

Posted on by Admin
Google Cloud’s Cybersecurity Trends to Watch in 2024 Include Generative AI-Based Attacks

A November report from Google Cloud details possible nation-state malware tactics in 2024 and new angles of cyberattacks. What will cybersecurity look like in 2024? Google Cloud’s global Cybersecurity Forecast found that generative AI can help attackers and defenders and urged security personnel to look out for nation-state backed attacks and more. Contributors to the report included several of Google Cloud’s security leaders and security experts from Mandiant Intelligence, Mandiant Consulting, Chronicle Security Operations, Google…

Read More

How CBA Is Managing Cyber Security in an Age of ‘Infinite Signals’

Posted on by Admin
How CBA Is Managing Cyber Security in an Age of ‘Infinite Signals’

Commonwealth Bank of Australia cyber defence operations leader Andrew Pade is building an AI legacy that will protect customers from cyber attacks and security professionals from career burnout. Image: Timon/Adobe Stock Andrew Pade took on the role of general manager of cyber defence operations and security integration at CBA just over three years ago. Yet in that time, according to Pade, the number of signals coming into its cyber practice has grown from 80 million…

Read More

New SecuriDropper Malware Bypasses Android 13 Restrictions, Disguised as Legitimate Applications

Posted on by Admin
New SecuriDropper Malware Bypasses Android 13 Restrictions, Disguised as Legitimate Applications

A new malware is bypassing an Android 13 security measure that restricts permissions to apps downloaded out of the legitimate Google Play Store. A new report from ThreatFabric, a fraud protection company, exposes SecuriDropper malware, which is capable of bypassing Android 13 restricted settings. The malware makes Android consider the installation as coming from the Google Play Store, though in reality it isn’t. It’s highly recommended for organizations to use Mobile Device Management solutions and…

Read More

Two-Factor vs. Multi-Factor Authentication: What’s the Difference? | McAfee Blog

Posted on by Admin
Two-Factor vs. Multi-Factor Authentication: What’s the Difference? | McAfee Blog

In recent times, the humble password’s efficacy as a security measure has come under scrutiny. With tendencies to be easily guessed, stolen, or bypassed, passwords have been deemed inadequate for securing sensitive information. Thankfully, more secure alternatives have emerged, with terms such as “two-factor” and “multi-factor” authentication gaining traction. However, these terms may seem abstract to those unfamiliar with them, potentially leading to confusion about their functions and differences. This article aims to break down…

Read More

EleKtra-Leak Campaign Uses AWS Cloud Keys Found on Public GitHub Repositories to Run Cryptomining Operation

Posted on by Admin
EleKtra-Leak Campaign Uses AWS Cloud Keys Found on Public GitHub Repositories to Run Cryptomining Operation

In the active Elektra-Leak campaign, attackers hunt for Amazon IAM credentials within public GitHub repositories before using them for cryptomining. Get tips on mitigating this cybersecurity threat. Image: WhataWin New research from Palo Alto Networks’s Unit 42 exposes an active attack campaign in which a threat actor hunts for Amazon IAM credentials in real time in GitHub repositories and starts using them less than five minutes later. The final payload runs customized Monero cryptomining software…

Read More

Could Australia’s Cybersecurity Strategy Benefit From More Data Science Rigour?

Posted on by Admin
Could Australia’s Cybersecurity Strategy Benefit From More Data Science Rigour?

The success of Australia’s six-shield cybersecurity strategy could depend on how well the nation manages the vast pools of data that will underpin the identification and mitigation of cyberthreats. Australia’s Home Affairs Minister Clare O’Neil recently revealed details of Australia’s Cyber Security Strategy 2023–2030. Designed to protect Australia in a fast-moving threat environment, the strategy would rely on building six cyber shields around the Australian nation. Jessie Jamieson, staff research engineer for decision science operations…

Read More

Celebrating Latinas in Tech

Posted on by Admin
Celebrating Latinas in Tech

To celebrate Hispanic Heritage Month, Cindy Valladares and Laura Elena Garza discussed their experiences as Latinas in tech. Valladares, director of brand strategy, customer advocacy, and storytelling at Cisco security, and Garza, manager of the Site Reliability Engineering Delivery team for Cisco Duo, hadn’t met before but quickly connected over how their cultures have impacted their lives and careers and how they both currently call the Pacific Northwest home. If you also value connection, authenticity,…

Read More
1 … 21 22 23 24 25 … 29