Is Hiring a Cybercriminal in Your Security Team Ever a Good Idea?

Blog WriterCybersecurity News - Original News Source is cm-alliance.com

Is Hiring a Cybercriminal in Your Security Team Ever a Good Idea? Date: 14 July 2022 Would you ever recruit a cyber criminal in your security team? This was the dichotomous question that executives participating in the recent Wisdom of …

Microsoft Patch Tuesday, July 2022 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released updates to fix at least 86 security vulnerabilities in its Windows operating systems and other software, including a weakness in all supported versions of Windows that Microsoft warns is actively being exploited. The software giant also has …

Experian, You Have Some Explaining to Do

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Twice in the past month KrebsOnSecurity has heard from readers who had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn’t theirs. In both cases the readers used password managers to select …

Why is Cybersecurity Critical for Education & Healthcare Sectors?

Blog WriterCybersecurity News - Original News Source is cm-alliance.com

Why is Cybersecurity Critical for Education & Healthcare Sectors? Date: 7 July 2022 While technological disruptions and digitisation are a boon to society, the scale and sophistication of cyberattacks is rising and will only continue to surge over the coming …

The rise of Ransomware-As-A-Service in 2022

Blog WriterCybersecurity News - Original News Source is cm-alliance.com

The rise of Ransomware-As-A-Service in 2022 Date: 6 July 2022 Ransomware-As-A-Service is a business model in which malware is developed by criminals for use by criminals. It is very similar to traditional software-as-a-service models. The big difference is that, in …

The Link Between AWM Proxy & the Glupteba Botnet

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

On December 7, 2021, Google announced it was suing two Russian men allegedly responsible for operating the Glupteba botnet, a global malware menace that has infected millions of computers over the past decade. That same day, AWM Proxy — a …

Hackers Exploit Mitel VoIP Zero-Day in Likely Ransomware Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A suspected ransomware intrusion against an unnamed target leveraged a Mitel VoIP appliance as an entry point to achieve remote code execution and gain initial access to the environment. The findings come from cybersecurity firm CrowdStrike, which traced …

Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A week after it emerged that a sophisticated mobile spyware dubbed Hermit was used by the government of Kazakhstan within its borders, Google said it has notified Android users of infected devices. Additionally, necessary changes have been implemented …

Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan Researchers have discovered a number of malicious Python packages in the official third-party software repository that are engineered to exfiltrate AWS credentials and environment variables to a publicly exposed endpoint. The list of packages includes loglib-modules, pyg-modules, pygrata, …

State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A China-based advanced persistent threat (APT) group is possibly deploying short-lived ransomware families as a decoy to cover up the true operational and tactical objectives behind its campaigns. The activity cluster, attributed to a hacking group dubbed Bronze Starlight by …