Tens of thousands of U.S. customers from Verizon, T-Mobile, and AT&T have been complaining about lack of wireless service or interruptions on Thursday morning. […]
LockBit ransomware secretly building next-gen encryptor before takedown
LockBit ransomware developers were secretly building a new version of their file encrypting malware, dubbed LockBit-NG-Dev – likely a future LockBit 4.0, when law enforcement took down the cybercriminal’s infrastructure earlier this week. […]
Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks
A recently open-sourced network mapping tool called SSH-Snake has been repurposed by threat actors to conduct malicious activities.
“SSH-Snake is a self-modifying worm that leverages SSH credentials discovered on a compromised system to start spreading itself throughout the network,” Sysdig researcher Miguel Hernández said.
“The worm automatically searches through known credential
“SSH-Snake is a self-modifying worm that leverages SSH credentials discovered on a compromised system to start spreading itself throughout the network,” Sysdig researcher Miguel Hernández said.
“The worm automatically searches through known credential
A New Age of Hacktivism
In the past 2 years, we have observed a significant surge in hacktivism activity due to ongoing wars and geopolitical conflicts in various regions. Since the war against Ukraine began, we have witnessed a notable mobilization of non-state and state-backed actors alike, forming new groups or joining existing hacker collectives.
We understand hacktivism as a form of computer hacking that is
We understand hacktivism as a form of computer hacking that is
Russian Government Software Backdoored to Deploy Konni RAT Malware
An installer for a tool likely used by the Russian Consular Department of the Ministry of Foreign Affairs (MID) has been backdoored to deliver a remote access trojan called Konni RAT (aka UpDog).
The findings come from German cybersecurity company DCSO, which linked the activity as originating from the Democratic People’s Republic of Korea (DPRK)-nexus actors targeting Russia.
The
The findings come from German cybersecurity company DCSO, which linked the activity as originating from the Democratic People’s Republic of Korea (DPRK)-nexus actors targeting Russia.
The
U.S. Offers $15 Million Bounty to Hunt Down LockBit Ransomware Leaders
The U.S. State Department has announced monetary rewards of up to $15 million for information that could lead to the identification of key leaders within the LockBit ransomware group and the arrest of any individual participating in the operation.
“Since January 2020, LockBit actors have executed over 2,000 attacks against victims in the United States, and around the world, causing costly
“Since January 2020, LockBit actors have executed over 2,000 attacks against victims in the United States, and around the world, causing costly
Password Managers and Strong Passwords
Password Managers, why should you use them?
- Enhanced Security:
- Unique, Strong Passwords: Most people tend to use weak passwords that are easily guessed or they reuse them across multiple websites. If you have to change your password you shouldn’t have to rename your dog. A password manager generates and stores strong, unique passwords for each account, reducing the risk of unauthorized access.
- Encryption: Password managers encrypt your passwords, ensuring that only you can access them. They must follow a very strong and regulated industry standard.
- Convenience and Efficiency:
- Time-Saving: Beyond security, password managers streamline your online experience. They automatically log you into websites, sparing you the hassle of remembering and typing passwords.
- Auto-Fill: In addition to passwords, they can store and auto-fill other information like addresses, phone numbers, and credit card details.
- Centralized Management:
- Single Vault: A password manager stores all your passwords in a single vault, accessible via a master password. No need to memorize numerous passwords.
- Organization: You can organize and categorize passwords, making it easy to find specific credentials when needed.
- Multi-Device Support:
- Sync Across Devices: Password managers work seamlessly across multiple devices (computers, smartphones, tablets). Your passwords stay consistent and accessible wherever you go.
- Security Best Practices:
- Avoiding Reuse: By generating unique passwords, you avoid the common pitfall of reusing the same password across different services.
- Multi-Factor Authentication (MFA): Some password managers support MFA, adding an extra layer of security.
- Security Keys: They can also integrate with security keys for added protection.
Creating good passwords, when you need to
There will be times you need to create a password despite having a password manager (like the password to get into the password manager). Make it long, random and something you can remember. “Mike, that is impossible” – No, it isn’t and I will show you how.
- Songs
Song: 45 by Shinedown
Favorite Lyrics: staring down the barrel of a 45 (45) Swimming through the ashes of another life (another life)
Password: Sdtboa45(45)Sttaoal(al) - Quote
Who: Martin Luther King Jr.
Said: “Darkness cannot drive out darkness, only light can do that. Hate cannot drive out hate, only love can do that.”
Password: Dcdod,olcdt.Hcdoh,olcdt.*15 - Book
Which: The Lion, the Witch and the Wardrobe by C.S. Lewis
Line: Once there were four children whose names were Peter, Susan, Edmund, and Lucy.
Password: Otw4cwnwP,S,E,L - Movie
Title: The Holy Grail
Line: “Your mother was a hamster and your father smelt of elderberries, I fart in your general direction”.
Password: YmwaHayfsoE,Ifiygd%12 - Personal Association
My thought: “cybersecurity is awesome and making password posts will help the world get safer, Cheaaa Boyy #Flavor Flav
Password: Cia&mppwhtwgs-CB#FF
Joomla fixes XSS flaws that could expose sites to RCE attacks
Five vulnerabilities have been discovered in the Joomla content management system that could be leveraged to execute arbitrary code on vulnerable websites. […]
Microsoft finally expands free logging—but only for govt agencies
Microsoft has expanded free Purview Audit logging capabilities for all U.S. federal agencies six months after disclosing that Chinese hackers stole U.S. government emails undetected in an Exchange Online breach between May and June 2023. […]
Hackers abuse Google Cloud Run in massive banking trojan campaign
Security researchers are warning of hackers abusing the Google Cloud Run service to distribute massive volumes of banking trojans like Astaroth, Mekotio, and Ousaban. […]