brangberg – Page 1409

Hackers Exploit Default Credentials in FOUNDATION Software to Breach Construction Firms

Threat actors have been observed targeting the construction sector by infiltrating the FOUNDATION Accounting Software, according to new findings from Huntress.
“Attackers have been observed brute-forcing the software at scale, and gaining access simply by using the product’s default credentials,” the cybersecurity company said.
Targets of the emerging threat include plumbing, HVAC (heating,

Watch on Demand: 2024 Attack Surface Management Summit – All Sessions Available

Sessions from SecurityWeek’s 2024 Attack Surface Management are now available to watch on demand.

The post Watch on Demand: 2024 Attack Surface Management Summit – All Sessions Available appeared first on SecurityWeek.

CISA Releases Cyber Defense Alignment Plan for Federal Agencies

CISA has laid out the FOCAL plan, which aligns the collective operational defense capabilities across federal agencies.

The post CISA Releases Cyber Defense Alignment Plan for Federal Agencies appeared first on SecurityWeek.

Germany seizes 47 crypto exchanges used by ransomware gangs

German law enforcement seized 47 cryptocurrency exchange services hosted in the country that facilitated illegal money laundering activities for cybercriminals, including ransomware gangs. […]

New Brazilian-Linked SambaSpy Malware Targets Italian Users via Phishing Emails

A previously undocumented malware called SambaSpy is exclusively targeting users in Italy via a phishing campaign orchestrated by a suspected Brazilian Portuguese-speaking threat actor.
“Threat actors usually try to cast a wide net to maximize their profits, but these attackers are focused on just one country,” Kaspersky said in a new analysis. “It’s likely that the attackers are testing the

Iranian Hackers Tried but Failed to Interest Biden’s Campaign in Stolen Trump Info, FBI Says

Iranian hackers sought to interest President Joe Biden’s campaign in information stolen from rival Donald Trump’s campaign.

The post Iranian Hackers Tried but Failed to Interest Biden’s Campaign in Stolen Trump Info, FBI Says appeared first on SecurityWeek.

How to reduce cyber risk during employee onboarding

Onboarding new employees is an important time for any organization but comes with a unique set of security risks. Learn more from Specops Software about these risks and how to mitigate them. […]

Opnova Banks Seed Capital to Tackle Security, IT Automation

Serial entrepreneur Sinan Eren is back with Opnova, a startup working on automating security workflows with limited human supervision.

The post Opnova Banks Seed Capital to Tackle Security, IT Automation appeared first on SecurityWeek.

Mysterious “LOVE” packet storms flood the internet since 2020

Internet intelligence firm GreyNoise reports that it has been tracking large waves of “Noise Storms” containing spoofed internet traffic since January 2020. However, despite extensive analysis, it has not concluded its origin and purpose. […]

New TeamTNT Cryptojacking Campaign Targets CentOS Servers with Rootkit

The cryptojacking operation known as TeamTNT has likely resurfaced as part of a new campaign targeting Virtual Private Server (VPS) infrastructures based on the CentOS operating system.
“The initial access was accomplished via a Secure Shell (SSH) brute force attack on the victim’s assets, during which the threat actor uploaded a malicious script,” Group-IB researchers Vito Alfano and Nam Le

Author: brangberg