2023 - Security Ticks

Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery

Barracuda, Featured, Vulnerabilities, Zero-Day / SecurityTicks

Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery 31/05/2023 at 12:49 By Eduard Kovacs The recently discovered Barracuda zero-day vulnerability CVE-2023-2868 has been exploited to deliver malware and steal data since at least October 2022. The post Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery appeared first on SecurityWeek. This article […]

React to this headline:

Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery Read More »

Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks

Uncategorized / SecurityTicks

Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks 31/05/2023 at 12:49 By The threat actor known as Dark Pink has been linked to five new attacks aimed at various entities in Belgium, Brunei, Indonesia, Thailand, and Vietnam between February 2022 and April 2023. This includes educational entities, government agencies, military bodies, and non-profit organizations,

React to this headline:

Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks Read More »

RomCom RAT Using Deceptive Web of Rogue Software Sites for Covert Attacks

Uncategorized / SecurityTicks

RomCom RAT Using Deceptive Web of Rogue Software Sites for Covert Attacks 31/05/2023 at 11:36 By The threat actors behind RomCom RAT are leveraging a network of fake websites advertising rogue versions of popular software at least since July 2022 to infiltrate targets. Cybersecurity firm Trend Micro is tracking the activity cluster under the name Void Rabisu,

React to this headline:

RomCom RAT Using Deceptive Web of Rogue Software Sites for Covert Attacks Read More »

Evolving Threat Landscape of Hacktivism in Colombia

#OpColombia, Berghof, Berghof Web Panel, critical infrastructure, cybercrime, darkweb, data breach, Data leak, DDoS Attack, Fueling Systems, GhostSec, GNSS, Government, Hacktivism, HMI, Human Machine Interface, Industrial Control Systems, Israel, Malware, National Critical Infrastructure, OpIsrael, OSINT, Power Supply Controllers, Radio Broadcast, Satellite Receivers, SiegedSec, Threat Intelligence, Zero-Day / SecurityTicks

Evolving Threat Landscape of Hacktivism in Colombia 31/05/2023 at 11:22 By cybleinc CRIL investigates the evolving threat landscape of hacktivism leading to cyberattacks on Colombian Critical Infrastructure and Zero-day Sales by Hacktivists. The post Evolving Threat Landscape of Hacktivism in Colombia appeared first on Cyble. This article is an excerpt from Cyble View Original Source

React to this headline:

Evolving Threat Landscape of Hacktivism in Colombia Read More »

Kali Linux 2023.2 released: New tools, a pre-built Hyper-V image, a new audio stack, and more!

Don't miss, Hot stuff, Kali Linux, Linux, News, Offensive Security, open source, penetration testing / SecurityTicks

Kali Linux 2023.2 released: New tools, a pre-built Hyper-V image, a new audio stack, and more! 31/05/2023 at 10:29 By Zeljka Zorz Offensive Security has released Kali Linux 2023.2, the latest version of its popular penetration testing and digital forensics platform. New tools in Kali Linux 2023.2 Aside from updates for existing tools, a new

React to this headline:

Kali Linux 2023.2 released: New tools, a pre-built Hyper-V image, a new audio stack, and more! Read More »

Alert: Hackers Exploit Barracuda Email Security Gateway 0-Day Flaw for 7 Months

Uncategorized / SecurityTicks

Alert: Hackers Exploit Barracuda Email Security Gateway 0-Day Flaw for 7 Months 31/05/2023 at 08:44 By Enterprise security firm Barracuda on Tuesday disclosed that a recently patched zero-day flaw in its Email Security Gateway (ESG) appliances had been abused by threat actors since October 2022 to backdoor the devices. The latest findings show that the critical vulnerability, tracked

React to this headline:

Alert: Hackers Exploit Barracuda Email Security Gateway 0-Day Flaw for 7 Months Read More »

The strategic importance of digital trust for modern businesses

certificates, cybersecurity, DigiCert, Don't miss, Features, Hot stuff, News, opinion / SecurityTicks

The strategic importance of digital trust for modern businesses 31/05/2023 at 07:32 By Mirko Zorz In this Help Net Security interview, Deepika Chauhan, CPO at DigiCert, talks about the importance of maintaining high trust assurance levels for businesses in today’s digital landscape. How does DigiCert define “digital trust,” and why is it essential for businesses

React to this headline:

The strategic importance of digital trust for modern businesses Read More »

Managing mental health in cybersecurity

burnout, cybersecurity, Don't miss, Hot stuff, how-to, strategy, tips, Video / SecurityTicks

Managing mental health in cybersecurity 31/05/2023 at 07:01 By Help Net Security In this Help Net Security video, Jason Lewkowicz, Chief Services Officer at Optiv, discusses mental health in cybersecurity, which needs more attention. There is a confluence of factors – from the cybersecurity talent shortage and reductions in force to volatile financial markets and

React to this headline:

Managing mental health in cybersecurity Read More »

Organizations are placing OT cybersecurity responsibility on CISOs

CISO, critical infrastructure, cybersecurity, Fortinet, News, report / SecurityTicks

Organizations are placing OT cybersecurity responsibility on CISOs 31/05/2023 at 06:35 By Help Net Security Protecting operational technology (OT) systems is now more critical than ever as more organizations connect their OT environments to the internet, according to Fortinet. Although IT/OT convergence has many benefits, it is being hampered and handicapped by advanced and destructive

React to this headline:

Organizations are placing OT cybersecurity responsibility on CISOs Read More »

Attackers leave organizations with no recovery option

backup, cyber insurance, cybercriminals, cybersecurity, News, Ransomware, Veeam Software / SecurityTicks

Attackers leave organizations with no recovery option 31/05/2023 at 06:13 By Help Net Security Organizations of all sizes are increasingly falling victim to ransomware attacks and inadequately protecting against this rising cyberthreat, according to Veeam. One in seven organizations will see almost all (>80%) data affected as a result of a ransomware attack – pointing

React to this headline:

Attackers leave organizations with no recovery option Read More »

Hunting For Password Reset Tokens By Spraying And Using HTTP Pipelining

Uncategorized / SecurityTicks

Hunting For Password Reset Tokens By Spraying And Using HTTP Pipelining 30/05/2023 at 22:17 By HTTP pipelining is a feature of HTTP/1.1 which allows multiple HTTP requests to be sent over a single TCP connection without waiting for the corresponding responses. This article is an excerpt from SpiderLabs Blog from Trustwave View Original Source React

React to this headline:

Hunting For Password Reset Tokens By Spraying And Using HTTP Pipelining Read More »

Technology integration exposes infrastructure to cyberattacks

Uncategorized / SecurityTicks

Technology integration exposes infrastructure to cyberattacks 30/05/2023 at 22:17 By From the disruption of fuel distribution to the interruption of emergency healthcare services, cyberattacks are no longer confined to cyberspace. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Technology integration exposes infrastructure to cyberattacks Read More »

89% of businesses report concern over new privacy regulations

Uncategorized / SecurityTicks

89% of businesses report concern over new privacy regulations 30/05/2023 at 21:28 By Organizations must ensure only the right people have access to the right data and that malicious actors don’t gain access to sensitive information. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

89% of businesses report concern over new privacy regulations Read More »

Attackers hacked Barracuda ESG appliances via zero-day since October 2022

backdoor, Barracuda Networks, data theft, Don't miss, exploit, Hot stuff, Malware, Mandiant, News, vulnerability / SecurityTicks

Attackers hacked Barracuda ESG appliances via zero-day since October 2022 30/05/2023 at 20:10 By Zeljka Zorz Barracuda says that the recently discovered compromise of some of it clients’ ESG appliances via a zero-day vulnerability (CVE-2023-2868) resulted in the deployment of three types of malware and data exfiltration. The company did not say how many organizations

React to this headline:

Attackers hacked Barracuda ESG appliances via zero-day since October 2022 Read More »

Prepare for severe weather ahead of hurricane season

Uncategorized / SecurityTicks

Prepare for severe weather ahead of hurricane season 30/05/2023 at 19:50 By The Atlantic hurricane season starts on June 1, meaning security leaders need to prepare for potential severe weather with a disaster response plan. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Prepare for severe weather ahead of hurricane season Read More »

Protect your IT assets through Managed Vulnerability Scanning

Uncategorized / SecurityTicks

Protect your IT assets through Managed Vulnerability Scanning 30/05/2023 at 18:10 By Managed vulnerability scanning is a cybersecurity service that uses software, vulnerability scanners, human-led and automated penetration testing, and other tools to help an organization identify, track, evaluate, and mitigate security risks both inside their network and connected external sources. This article is an

React to this headline:

Protect your IT assets through Managed Vulnerability Scanning Read More »

Void Rabisu’s Use of RomCom Backdoor Shows a Growing Shift in Threat Actors’ Goals

Trend Micro Research : Cyber Threats, Trend Micro Research : Latest News, Trend Micro Research : Malware, Trend Micro Research : Research / SecurityTicks

Void Rabisu’s Use of RomCom Backdoor Shows a Growing Shift in Threat Actors’ Goals 30/05/2023 at 17:19 By Void Rabisu, a malicious actor believed to be associated with the RomCom backdoor, was thought to be driven by financial gain because of its ransomware attacks. But in this blog entry, we discuss how the use of

React to this headline:

Void Rabisu’s Use of RomCom Backdoor Shows a Growing Shift in Threat Actors’ Goals Read More »

PyPI Enforcing 2FA for All Project Maintainers to Boost Security

2FA, Identity & Access, PyPI / SecurityTicks

PyPI Enforcing 2FA for All Project Maintainers to Boost Security 30/05/2023 at 17:06 By Ionut Arghire PyPI will require all accounts that maintain a project to enable two-factor authentication (2FA) by the end of 2023. The post PyPI Enforcing 2FA for All Project Maintainers to Boost Security appeared first on SecurityWeek. This article is an

React to this headline:

PyPI Enforcing 2FA for All Project Maintainers to Boost Security Read More »

Personal Information of 9 Million Individuals Stolen in MCNA Ransomware Attack

Data Breaches, healthcare, Ransomware / SecurityTicks

Personal Information of 9 Million Individuals Stolen in MCNA Ransomware Attack 30/05/2023 at 17:06 By Ionut Arghire Dental benefits manager MCNA is informing roughly 9 million individuals that their personal data was compromised in a data breach. The post Personal Information of 9 Million Individuals Stolen in MCNA Ransomware Attack appeared first on SecurityWeek. This

React to this headline:

Personal Information of 9 Million Individuals Stolen in MCNA Ransomware Attack Read More »

Many Vulnerabilities Found in PrinterLogic Enterprise Software

Vulnerabilities, vulnerability / SecurityTicks

Many Vulnerabilities Found in PrinterLogic Enterprise Software 30/05/2023 at 17:06 By Ionut Arghire Multiple vulnerabilities in PrinterLogic’s enterprise management printer solution could expose organizations to various types of attacks. The post Many Vulnerabilities Found in PrinterLogic Enterprise Software appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Many Vulnerabilities Found in PrinterLogic Enterprise Software Read More »