Silicon, stars, and sulfur make Apollo’s unlikely legacy 2024-07-29 at 11:46 By Rupert Goodwins Neil stepped on a rock. We’re surfing an interstellar wave 9,000 light years long. Go us Opinion Fifty-five years after Neil Armstrong’s one small step, and the future it promised has not come to pass. Nobody has gone back to the […]
Silicon, stars, and sulfur make Apollo’s unlikely legacy Read More »
‘Stargazer Goblin’ Creates 3,000 Fake GitHub Accounts for Malware Spread 2024-07-29 at 10:46 By A threat actor known as Stargazer Goblin has set up a network of inauthentic GitHub accounts to fuel a Distribution-as-a-Service (DaaS) that propagates a variety of information-stealing malware and netting them $100,000 in illicit profits over the past year. The network,
‘Stargazer Goblin’ Creates 3,000 Fake GitHub Accounts for Malware Spread Read More »
Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed 2024-07-29 at 09:46 By Simon Sharwood Promises to discourage use of kernel drivers – so they don’t crash the world again Microsoft has admitted that its estimate of 8.5 million machines crashed by CrowdStrike’s faulty software update was almost certainly too low, and vowed to reduce
Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed Read More »
Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site 2024-07-29 at 09:16 By The remote access trojan known as Gh0st RAT has been observed being delivered by an “evasive dropper” called Gh0stGambit as part of a drive-by download scheme targeting Chinese-speaking Windows users. These infections stem from a fake website (“chrome-web[.]com”) serving malicious
Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site Read More »
China ponders creating a national ‘cyberspace ID’ 2024-07-29 at 08:31 By Laura Dobberstein Because clearly it’s better for Beijing to know who you are than for every ISP and social service to keep its own records Beijing may soon issue “cyberspace IDs” to its citizens, after floating a proposal for the scheme last Friday.… This
China ponders creating a national ‘cyberspace ID’ Read More »
Enhancing threat detection for GenAI workloads with cloud attack emulation 2024-07-29 at 08:01 By Help Net Security Cloud GenAI workloads inherit pre-existing cloud security challenges, and security teams must proactively evolve innovative security countermeasures, including threat detection mechanisms. Traditional cloud threat detection Threat detection systems are designed to allow early detection of potential security breaches;
Enhancing threat detection for GenAI workloads with cloud attack emulation Read More »
US claims TikTok shipped personal data to China – very personal data 2024-07-29 at 07:46 By Simon Sharwood Not even Oracle could stop it, claims DoJ The US Department of Justice has alleged that TikTok shipped personal information to China and allowed profiling of the short video app’s users based on their attitudes to some
US claims TikTok shipped personal data to China – very personal data Read More »
Cirrus: Open-source Google Cloud forensic collection 2024-07-29 at 07:16 By Mirko Zorz Cirrus is an open-source Python-based tool designed to streamline Google Cloud forensic evidence collection. It can streamline environment access and evidence collection in investigations involving Google Workspace and GCP. The tool simplifies incident response activities and enhances an organization’s security posture. Key features
Cirrus: Open-source Google Cloud forensic collection Read More »
The bad actor’s best friend: Dormant service accounts 2024-07-29 at 07:16 By Inactive accounts are a hotbed of opportunity for attackers, even more so if accounts remain dormant for long periods of time. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source
The bad actor’s best friend: Dormant service accounts Read More »
Why a strong patch management strategy is essential for reducing business risk 2024-07-29 at 07:01 By Mirko Zorz In this Help Net Security interview, Eran Livne, Senior Director of Product Management, Endpoint Remediation at Qualys and Thomas Scheffler, Security Operations Manager of Cintas Corporation, discuss their experiences with automated patch management. Scheffler details how Cintas
Why a strong patch management strategy is essential for reducing business risk Read More »
Group of 91 nations agree to continue not taxing cross-border data movement – for now 2024-07-29 at 06:46 By Simon Sharwood Promote free use of government data, privacy, canning spam, and more Five years of trade negotiations reached a milestone last Friday with 91 nations agreeing on new norms for e-commerce – among them extension
Group of 91 nations agree to continue not taxing cross-border data movement – for now Read More »
The cost of cybersecurity burnout: Impact on performance and well-being 2024-07-29 at 06:31 By Help Net Security This article includes excerpts from recent reports we covered, providing statistics and insights into the levels of stress and burnout experienced by cybersecurity professionals. Most cybersecurity pros took time off due to mental health issues Hack The Box
The cost of cybersecurity burnout: Impact on performance and well-being Read More »
The gap between business confidence and cyber resiliency 2024-07-29 at 06:06 By Help Net Security In this Help Net Security video, Jim Liddle, Nasuni’s Chief Innovation Officer, discusses the findings of its new 2024 industry research report, The Era of Hybrid Cloud Storage. Key takeaways: Cloud strategies are at the forefront of enterprise success. Enterprises
The gap between business confidence and cyber resiliency Read More »
Whitepaper: DevSecOps Blueprint 2024-07-29 at 05:46 By Help Net Security In the DevSecOps Blueprint whitepaper, GitGuardian outlines a robust foundation for building an automated and technology-driven DevSecOps Program that addresses every aspect of the SDLC. Learn how your organization can embed security at every layer: the tools and technologies, the processes (like IR and security
Whitepaper: DevSecOps Blueprint Read More »
VPN Surge in Bangladesh Amid Violent Protests 2024-07-28 at 19:23 In the wake of escalating violent protests in Bangladesh, a massive surge in Virtual Private Network (VPN) usage has been witnessed as citizens strived to circumvent government-imposed internet restrictions. Earlier this month, two groups of students with opposing political views came into conflict at a
VPN Surge in Bangladesh Amid Violent Protests Read More »
US Spyware Maker Spytech Falls Victim to Data Breach 2024-07-28 at 18:31 Minnesota-based spyware maker Spytech has fallen victim to a significant data breach, exposing the sensitive data of thousands of devices worldwide. According to TechCrunch, unknown hackers accessed Spytech’s servers and obtained a cache of files that included detailed activity logs from more than
US Spyware Maker Spytech Falls Victim to Data Breach Read More »
Hackers Mimic Hamster Kombat to Spread Malware 2024-07-28 at 18:14 Cybercriminals are exploiting the popularity of the Hamster Kombat mobile game by distributing fake clones to steal user information. The malicious apps are being spread primarily through Telegram and spoof websites, targeting players looking for the official game. The game, launched in March 2024, has
Hackers Mimic Hamster Kombat to Spread Malware Read More »
Week in review: CrowdStrike-triggered outage insights, recovery, and measuring cybersecurity ROI 2024-07-28 at 11:02 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft releases tool to speed up recovery of systems borked by CrowdStrike update By now, most people are aware of – or
The secret to better weather forecasts may be a dash of AI 2024-07-27 at 16:31 By Tobias Mann Google adds machine learning to climate models for ‘faster forecasts’ Climate and weather modeling has long been a staple of high-performance computing, but as meteorologists look to improve the speed and resolution of forecasts, machine learning is
The secret to better weather forecasts may be a dash of AI Read More »
French Authorities Launch Operation to Remove PlugX Malware from Infected Systems 2024-07-27 at 10:01 By French judicial authorities, in collaboration with Europol, have launched a so-called “disinfection operation” to rid compromised hosts of a known malware called PlugX. The Paris Prosecutor’s Office, Parquet de Paris, said the initiative was launched on July 18 and that
French Authorities Launch Operation to Remove PlugX Malware from Infected Systems Read More »