Uncategorized

Franklin Jackson named new CIO at CyberCatch Holdings, Inc 08/05/2023 at 16:36 By This week, CyberCatch Holdings, Inc. announced Franklin Jackson will serve as the company’s Vice President, Chief Information Officer (CIO) and Head of Global Security Advisory Services. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

How to Set Up a Threat Hunting and Threat Intelligence Program 08/05/2023 at 15:29 By Threat hunting is an essential component of your cybersecurity strategy. Whether you’re getting started or in an advanced state, this article will help you ramp up your threat intelligence program. What is Threat Hunting? The cybersecurity industry is shifting from

CERT-UA Warns of SmokeLoader and RoarBAT Malware Attacks Against Ukraine 08/05/2023 at 13:56 By An ongoing phishing campaign with invoice-themed lures is being used to distribute the SmokeLoader malware in the form of a polyglot file, according to the Computer Emergency Response Team of Ukraine (CERT-UA). The emails, per the agency, are sent using compromised accounts

Using Co-Managed SOC to Derive Maximum Value from a SIEM Investment 07/05/2023 at 18:25 By Security information and event management (SIEM) systems are crucial to cyber security, providing a solution for collecting and analyzing alerts from all manner of security tools, network infrastructure, and applications. This article is an excerpt from Trustwave Blog View Original

Trustwave Briefs Federal Officials on Cybersecurity Trends and Discoveries 07/05/2023 at 18:25 By Karl Sigler, Senior Security Research Manager, SpiderLabs Threat Intelligence, conducted a series of briefings in Washington, D.C., to federal officials on April 12-13, giving an update on what Trustwave SpiderLabs researchers are finding with the Russia-Ukraine War, ChatGPT, and current phishing trends.

MDR Can Bring Value to Your Endpoint Detection and Response Platform 07/05/2023 at 18:25 By Endpoint detection and response (EDR) solutions are a crucial element of any cyber defense strategy. This article is an excerpt from Trustwave Blog View Original Source

Trustwave Answers 11 Important Questions on ChatGPT 07/05/2023 at 18:25 By ChatGPT can arguably be called the breakout software introduction of the last 12 months, generating both amazement at its potential and concerns that threat actors will weaponize and use it as an attack platform. This article is an excerpt from Trustwave Blog View Original

Trustwave MDR and Penetration Testing Solutions Win Global InfoSec Awards 07/05/2023 at 18:25 By Trustwave was honored during Cyber Defense Magazine in the 11th Annual Global InfoSec Awards at the 2023 RSA Conference, taking home accolades for Managed Detection and Response (MDR) Service Providers and was named the Market Leader in Penetration Testing. This article

CVE-2023-29383: Abusing Linux chfn to Misrepresent /etc/passwd 07/05/2023 at 18:24 By Two years ago, I picked out chfn as a candidate to be reviewed for security bugs. Why chfn I hear you ask? (Thanks for asking.) It is one of a small number of Set owner User ID (SUID) programs loaded with Linux which means

Dissecting Buffer Overflow Attacks in MongoDB 07/05/2023 at 18:24 By Towards the end of 2020, a new vulnerability in MongoDB was found and published. The vulnerability affected almost all versions of MongoDB, up to v4.5.0, but was discussed and patched appropriately. This article is an excerpt from SpiderLabs Blog from Trustwave View Original Source

Why It’s Important to Change Default Credentials 07/05/2023 at 18:24 By Security best practice guidelines always call for changing default passwords as any password left on the factory preset is considered low hanging fruit, essentially just waiting to be abused by attackers to gain unauthorized access. This article is an excerpt from SpiderLabs Blog from

Deobfuscating the Recent Emotet Epoch 4 Macro 07/05/2023 at 18:24 By This analysis is intended to help the cybersecurity community better understand the wider obfuscation and padding tricks Emotet is using. This article is an excerpt from SpiderLabs Blog from Trustwave View Original Source

Rilide: A New Malicious Browser Extension for Stealing Cryptocurrencies 07/05/2023 at 18:24 By Trustwave SpiderLabs uncovered a new strain of malware that it dubbed Rilide, which targets Chromium-based browsers such as Google Chrome, Microsoft Edge, Brave, and Opera. This article is an excerpt from SpiderLabs Blog from Trustwave View Original Source

White House officials discuss AI concerns with security organizations 07/05/2023 at 18:23 By Vice President Harris and other White House officials met with security leaders to address risks associated with artificial intelligence (AI).  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Virginia school offers cybersecurity education program 07/05/2023 at 18:23 By A tech industry adult education program is being offered by Virginia Commonwealth University and the Institute of Data to help fill the talent gap. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

City of Dallas recovers after recent ransomware attack 07/05/2023 at 18:23 By City of Dallas residents are still dealing with some delays and disruptions following a Wednesday ransomware attack which affected some city websites and services. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Add ‘prompt’ to the long list of injection attacks 07/05/2023 at 18:23 By Generative AI tools can be manipulated to accomplish malicious tasks, reveal sensitive information or ignore safety filters with the right prompt. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Five reasons organizations aren’t ready for the next cyberattack 07/05/2023 at 18:23 By Even as security organizations are economizing on everything from desk space to free coffee cyber threats are consistently getting worse. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks 07/05/2023 at 18:22 By Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw. The issue, assigned the identifier CVE-2023-30777, relates to a case of reflected cross-site scripting (XSS) that

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry 07/05/2023 at 18:22 By An advanced persistent threat (APT) actor known as Dragon Breath has been observed adding new layers of complexity to its attacks by adopting a novel DLL side-loading mechanism. “The attack is based on a classic side-loading attack, consisting of a clean application, a malicious