Rethinking Vulnerability Management in a Heightened Threat Landscape

Find out why a vital component of vulnerability management needs to be the capacity to prioritize from Mariano Nunez, CEO of Onapsis and Threatpost Infosec Insiders columnist.

from Threatpost https://ift.tt/2Z5MXSa
via gqrds

APT41 Spies Broke Into 6 US State Networks via a Livestock App

The China-affiliated state-sponsored threat actor used Log4j and zero-day bugs in the USAHerds animal-tracking software to hack into multiple government networks.

from Threatpost https://ift.tt/aDVg350
via gqrds

SolarWinds Attackers Spotted Using New Tactics, Malware

One year after the disruptive supply-chain attacks, researchers have observed two new clusters of activity from the Russia-based actors that signal a significant threat may be brewing.

from Threatpost https://ift.tt/31BuHp9
via gqrds

Phishing Scam Aims to Hijack TikTok ‘Influencer’ Accounts

Threat actors used malicious emails to target more than 125 people with high-profile TikTok accounts in an attempt to steal info and lock them out.

from Threatpost https://ift.tt/3FuLNn3
via gqrds

Threat from Organized Cybercrime Syndicates Is Rising

Europol reports that criminal groups are undermining the EU’s economy and its society, offering everything from murder-for-hire to kidnapping, torture and mutilation.

from Threatpost https://ift.tt/3wKWL4G
via gqrds

Magecart Credit Card Skimmer Avoids VMs to Fly Under the Radar

The Magecart threat actor uses a browser script to evade detection by researchers and sandboxes so it targets only victims’ machines to steal credentials and personal info.

from Threatpost https://ift.tt/3mJTS0A
via gqrds

All Sectors Are Now Prey as Cyber Threats Expand Targeting

Aamir Lakhani, security researcher at Fortinet, says no sector is off limits these days: It's time for everyone to strengthen the kill chain.

from Threatpost https://ift.tt/3Eoy4gS
via gqrds

Encrypted & Fileless Malware Sees Big Growth

An analysis of second-quarter malware trends shows that threats are becoming stealthier.

from Threatpost https://ift.tt/3Bb33vR
via gqrds

Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk

Dubbed OMIGOD, a series of vulnerabilities in the Open Management Infrastructure used in Azure on Linux demonstrate hidden security threats, researchers said.

from Threatpost https://ift.tt/2Xk1Jri
via gqrds

Attackers Impersonate DoT in Two-Day Phishing Scam

Threat actors dangled the lure of receiving funds from the $1 trillion infrastructure bill and created new domains mimicking the real federal site.

from Threatpost https://ift.tt/3EnrKqD
via gqrds

Microsoft Patches Actively Exploited Windows Zero-Day Bug

On Patch Tuesday, Microsoft fixed 66 CVEs, including an RCE bug in MSHTML under active attack as threat actors passed around guides for the drop-dead simple exploit.

from Threatpost https://ift.tt/3EsbMvJ
via gqrds

Stolen Credentials Led to Data Theft at United Nations

Threat actors accessed the organization’s proprietary project management software, Umoja, in April, accessing the network and stealing info that can be used in further attacks.

from Threatpost https://ift.tt/3hfAtBt
via gqrds

Holy Grail of Security: Answers to ‘Did XYZ Work?’ – Podcast

Verizon DBIR is already funny, useful & well-written, and it just got better with mapping to MITRE ATT&CK TTPs. The marriage could finally bring answers to "What are we doing right?" instead of the constant reminders of what's not working in fending off threats.

from Threatpost https://ift.tt/3l4sKHg
via gqrds

Feds Warn of Ransomware Attacks Ahead of Labor Day

Threat actors recently have used long holiday weekends -- when many staff are taking time off -- as a prime opportunity to ambush organizations.

from Threatpost https://ift.tt/3BsrPqQ
via gqrds

LockFile Ransomware Uses Never-Before Seen Encryption to Avoid Detection

Researchers from Sophos discovered the emerging threat in July, which exploits the ProxyShell vulnerabilities in Microsoft Exchange servers to attack systems.

from Threatpost https://ift.tt/3kBBi8E
via gqrds

Podcast: Ransomware Up x10: Disrupting Cybercrime Suppy Chains an Opportunity

Derek Manky, Chief, Security Insights & Global Threat Alliances at Fortinet’s FortiGuard Labs, discusses the top threats and lessons learned from the first half of 2021.

from Threatpost https://ift.tt/3kqIofW
via gqrds

Effective Threat-Hunting Queries in a Redacted World

Chad Anderson, senior security researcher for DomainTools, demonstrates how seemingly disparate pieces of infrastructure information can form perfect fingerprints for tracking cyberattackers' infrastructure.

from Threatpost https://ift.tt/3zfOLsD
via gqrds

Nigerian Threat Actors Solicit Employees to Deploy Ransomware for Cut of Profits

Campaign emails company insiders and initially offers 1 million in Bitcoin if they install DemonWare on an organization’s network.

from Threatpost https://ift.tt/37ZxQi7
via gqrds

Amazon’s Plan to Track Worker Keystrokes: A Sign of Controls to Come?

Data theft, insider threats and imposters accessing sensitive customer data have apparently gotten so bad inside Amazon, the company is considering rolling out keyboard-stroke monitoring for its customer-service reps. A confidential memo from inside Amazon explained that customer service credential abuse and data theft was on the rise, according to Motherboard which reviewed the document. […]

from Threatpost https://ift.tt/2VPVwmm
via gqrds

WordPress Sites Abused in Aggah Spear-Phishing Campaign

The Pakistan-linked threat group's campaign uses compromised WordPress sites to deliver the Warzone RAT to manufacturing companies in Taiwan and South Korea.

from Threatpost https://ift.tt/37HdU3e
via gqrds