In addition to its long-standing password spraying attacks, Microsoft says Iran-backed hacker group Peach Sandstorm—or APT 33—has developed custom malware dubbed “Tickler.”
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-28 16:06:502024-08-28 16:06:50Notorious Iranian Hackers Have Been Targeting the Space Industry With a New Backdoor
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-28 16:06:502024-08-28 16:06:50Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-28 16:06:502024-08-28 16:06:50Manufacturing Sector Under Fire From Microsoft Credential Thieves
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-28 16:06:492024-08-28 16:06:49LinkedIn Hires Former Twitter Security Chief Lea Kissner as New CISO
A South Korea-aligned cyber espionage has been linked to the zero-day exploitation of a now-patched critical remote code execution flaw in Kingsoft WPS Office to deploy a bespoke backdoor dubbed SpyGlace.
The activity has been attributed to a threat actor dubbed APT-C-60, according to cybersecurity firms ESET and DBAPPSecurity. The attacks have been found to infect Chinese and East Asian users
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-28 15:07:482024-08-28 15:07:48Hitachi Energy Vulnerabilities Plague SCADA Power Systems
The latest encryptor variant identified by researchers at Cisco Talos appends the file extension ‘blackbytent_h’ to encrypted files. This variant also includes the deployment of four vulnerable drivers, an increase from previous reports.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-28 15:07:482024-08-28 15:07:48BlackByte Blends Known Tactics With New Encryptor Variant and Vulnerability Exploits to Support Ongoing Attacks
With the right processes and tools, organizations can implement advanced AI security frameworks that make hidden risks visible, enabling security teams to track and address them before impact.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-28 14:07:572024-08-28 14:07:57Why LLMs Are Just the Tip of the AI Security Iceberg
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-08-28 14:07:572024-08-28 14:07:57WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies
BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Notorious Iranian Hackers Have Been Targeting the Space Industry With a New Backdoor
/in General NewsIn addition to its long-standing password spraying attacks, Microsoft says Iran-backed hacker group Peach Sandstorm—or APT 33—has developed custom malware dubbed “Tickler.”
Security Latest – Read More
Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs
/in General NewsAmidst Volt Typhoon zero-day exploitation, Censys finds hundreds of exposed servers presenting ripe attack surface for attackers.
The post Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs appeared first on SecurityWeek.
SecurityWeek – Read More
Manufacturing Sector Under Fire From Microsoft Credential Thieves
/in General NewsThe emails impersonate well-known companies in the industry, fooling the victim into thinking they are communicating with a legitimate entity.
darkreading – Read More
LinkedIn Hires Former Twitter Security Chief Lea Kissner as New CISO
/in General NewsLea Kissner replaces Geoff Belknap as Chief Information Security Officer (CISO) at Microsoft-owned LinkedIn.
The post LinkedIn Hires Former Twitter Security Chief Lea Kissner as New CISO appeared first on SecurityWeek.
SecurityWeek – Read More
APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor
/in General NewsA South Korea-aligned cyber espionage has been linked to the zero-day exploitation of a now-patched critical remote code execution flaw in Kingsoft WPS Office to deploy a bespoke backdoor dubbed SpyGlace.
The activity has been attributed to a threat actor dubbed APT-C-60, according to cybersecurity firms ESET and DBAPPSecurity. The attacks have been found to infect Chinese and East Asian users
The Hacker News – Read More
Hitachi Energy Vulnerabilities Plague SCADA Power Systems
/in General NewsThe company has assessed four of the five disclosed vulnerabilities as being of high to critical severity.
darkreading – Read More
BlackByte Blends Known Tactics With New Encryptor Variant and Vulnerability Exploits to Support Ongoing Attacks
/in General NewsThe latest encryptor variant identified by researchers at Cisco Talos appends the file extension ‘blackbytent_h’ to encrypted files. This variant also includes the deployment of four vulnerable drivers, an increase from previous reports.
Cyware News – Latest Cyber News – Read More
New LummaC2 Malware Variant Uses PowerShell, Obfuscation to Steal Data
/in General NewsOntinue has discovered a new LummaC2 malware variant with increased activity, using PowerShell for initial infection and employing…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Why LLMs Are Just the Tip of the AI Security Iceberg
/in General NewsWith the right processes and tools, organizations can implement advanced AI security frameworks that make hidden risks visible, enabling security teams to track and address them before impact.
darkreading – Read More
WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies
/in General NewsA WPS Office zero-day vulnerability tracked as CVE-2024-7262 was exploited by South Korean hacker group APT-C-60.
The post WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies appeared first on SecurityWeek.
SecurityWeek – Read More