July 2024

‘Error’ in Microsoft’s DDoS defenses amplified 8-hour Azure outage 2024-07-31 at 16:07 By Richard Speed A playbook full of strategies and someone fumbles the implementation Do you have problems configuring Microsoft’s Defender? You might not be alone: Microsoft admitted that whatever it’s using for its defensive implementation exacerbated yesterday’s Azure instability.… This article is an

SYS01 Infostealer and Rilide Malware Likely Developed by the Same Threat Actor 2024-07-31 at 16:06 By Drawing on extensive proprietary research, Trustwave SpiderLabs believes the threat actors behind the Facebook malvertising infostealer SYS01 are the same group that developed the previously reported Rilide malware. This article is an excerpt from SpiderLabs Blog View Original Source

The path to reducing software vulnerabilities leads to AI 2024-07-31 at 15:16 By Tool proliferation has created a data volume challenge, making it harder to secure the software development and deployment lifecycle. Fortunately, AI now offers a solution. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

It is 60 years since a US spacecraft first took a close-up of the Moon 2024-07-31 at 14:47 By Richard Speed Ranger 7 finally gets its shot. Five years later, humans would follow It has been 60 years since a spacecraft snapped the USA’s first close-up images of the lunar surface, a mere five years

Chinese Hackers Target Japanese Firms with LODEINFO and NOOPDOOR Malware 2024-07-31 at 14:31 By Japanese organizations are the target of a Chinese nation-state threat actor that leverages malware families like LODEINFO and NOOPDOOR to harvest sensitive information from compromised hosts while stealthily remaining under the radar in some cases for a time period ranging from

How To Get the Most From Your Security Team’s Email Alert Budget 2024-07-31 at 14:31 By We’ll TL;DR the FUDdy introduction: we all know that phishing attacks are on the rise in scale and complexity, that AI is enabling more sophisticated attacks that evade traditional defenses, and the never-ending cybersecurity talent gap means we’re all

OpenTofu hits version 1.8 with more crowd-pleasing features 2024-07-31 at 13:32 By Richard Speed Open source TerraForm rival introduces a new file extension so users can ‘keep older code around for compatibility’ Terraform alternative OpenTofu has reached version 1.8 amid further signs of fragmentation.… This article is an excerpt from The Register View Original Source

Cybercriminals Deploy 100K+ Malware Android Apps to Steal OTP Codes 2024-07-31 at 13:16 By A new malicious campaign has been observed making use of malicious Android apps to steal users’ SMS messages since at least February 2022 as part of a large-scale campaign. The malicious apps, spanning over 107,000 unique samples, are designed to intercept

Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova 2024-07-31 at 13:16 By Companies in Russia and Moldova have been the target of a phishing campaign orchestrated by a little-known cyber espionage group known as XDSpy. The findings come from cybersecurity firm F.A.C.C.T., which said the infection chains lead to the deployment of a