Sessions from SecurityWeek’s 2024 Attack Surface Management are now available to watch on demand.
The post Watch on Demand: 2024 Attack Surface Management Summit – All Sessions Available appeared first on SecurityWeek.
CISA Releases Cyber Defense Alignment Plan for Federal Agencies
CISA has laid out the FOCAL plan, which aligns the collective operational defense capabilities across federal agencies.
The post CISA Releases Cyber Defense Alignment Plan for Federal Agencies appeared first on SecurityWeek.
Germany seizes 47 crypto exchanges used by ransomware gangs
German law enforcement seized 47 cryptocurrency exchange services hosted in the country that facilitated illegal money laundering activities for cybercriminals, including ransomware gangs. […]
New Brazilian-Linked SambaSpy Malware Targets Italian Users via Phishing Emails
A previously undocumented malware called SambaSpy is exclusively targeting users in Italy via a phishing campaign orchestrated by a suspected Brazilian Portuguese-speaking threat actor.
“Threat actors usually try to cast a wide net to maximize their profits, but these attackers are focused on just one country,” Kaspersky said in a new analysis. “It’s likely that the attackers are testing the
“Threat actors usually try to cast a wide net to maximize their profits, but these attackers are focused on just one country,” Kaspersky said in a new analysis. “It’s likely that the attackers are testing the
Iranian Hackers Tried but Failed to Interest Biden’s Campaign in Stolen Trump Info, FBI Says
Iranian hackers sought to interest President Joe Biden’s campaign in information stolen from rival Donald Trump’s campaign.
The post Iranian Hackers Tried but Failed to Interest Biden’s Campaign in Stolen Trump Info, FBI Says appeared first on SecurityWeek.
How to reduce cyber risk during employee onboarding
Onboarding new employees is an important time for any organization but comes with a unique set of security risks. Learn more from Specops Software about these risks and how to mitigate them. […]
Opnova Banks Seed Capital to Tackle Security, IT Automation
Serial entrepreneur Sinan Eren is back with Opnova, a startup working on automating security workflows with limited human supervision.
The post Opnova Banks Seed Capital to Tackle Security, IT Automation appeared first on SecurityWeek.
Mysterious “LOVE” packet storms flood the internet since 2020
Internet intelligence firm GreyNoise reports that it has been tracking large waves of “Noise Storms” containing spoofed internet traffic since January 2020. However, despite extensive analysis, it has not concluded its origin and purpose. […]
New TeamTNT Cryptojacking Campaign Targets CentOS Servers with Rootkit
The cryptojacking operation known as TeamTNT has likely resurfaced as part of a new campaign targeting Virtual Private Server (VPS) infrastructures based on the CentOS operating system.
“The initial access was accomplished via a Secure Shell (SSH) brute force attack on the victim’s assets, during which the threat actor uploaded a malicious script,” Group-IB researchers Vito Alfano and Nam Le
“The initial access was accomplished via a Secure Shell (SSH) brute force attack on the victim’s assets, during which the threat actor uploaded a malicious script,” Group-IB researchers Vito Alfano and Nam Le
CISA: Oracle Vulnerabilities From ‘Miracle Exploit’ Targeted in Attacks
CISA is warning organizations that two Oracle vulnerabilities tracked as CVE-2022-21445 and CVE-2020-14644 are being exploited in the wild.
The post CISA: Oracle Vulnerabilities From ‘Miracle Exploit’ Targeted in Attacks appeared first on SecurityWeek.