Webinar: How The Right XDR Can Be a Game-Changer for Lean Security Teams

Webinar: How The Right XDR Can Be a Game-Changer for Lean Security Teams,

Extended detection and response (XDR) is expected to be the future of cybersecurity, merging security technologies with the evolving approach to the way we do cybersecurity. And while many organizations are scrambling to integrate XDR into their cybersecurity strategies – even more are still trying to figure out what XDR really is and if it’s even the right solution for their organization. 
But

,

Extended detection and response (XDR) is expected to be the future of cybersecurity, merging security technologies with the evolving approach to the way we do cybersecurity. And while many organizations are scrambling to integrate XDR into their cybersecurity strategies – even more are still trying to figure out what XDR really is and if it’s even the right solution for their organization. 
But

, ,
https://thehackernews.com/2022/04/webinar-how-right-xdr-can-be-game.html

Microsoft Exposes Evasive Chinese Tarrask Malware Attacking Windows Computers

Microsoft Exposes Evasive Chinese Tarrask Malware Attacking Windows Computers,

The Chinese-backed Hafnium hacking group has been linked to a piece of a new malware that’s used to maintain persistence on compromised Windows environments.
The threat actor is said to have targeted entities in the telecommunication, internet service provider and data services sectors from August 2021 to February 2022, expanding from the initial victimology patterns observed during its attacks

,

The Chinese-backed Hafnium hacking group has been linked to a piece of a new malware that’s used to maintain persistence on compromised Windows environments.
The threat actor is said to have targeted entities in the telecommunication, internet service provider and data services sectors from August 2021 to February 2022, expanding from the initial victimology patterns observed during its attacks

, ,
https://thehackernews.com/2022/04/microsoft-exposes-evasive-chinese.html

Microsoft corrige près de 130 failles de sécurité, dont dix critiques et deux zero-day

Microsoft corrige près de 130 failles de sécurité, dont dix critiques et deux zero-day,

Le Patch Tuesday d’avril de Microsoft corrige un total de 128 vulnérabilités, dont dix sont qualifiées de critiques. Il corrige surtout deux failles zero-day, dont une est déjà exploitée par les pirates pour leurs attaques.

,

Le Patch Tuesday d’avril de Microsoft corrige un total de 128 vulnérabilités, dont dix sont qualifiées de critiques. Il corrige surtout deux failles zero-day, dont une est déjà exploitée par les pirates pour leurs attaques.

, ,
https://www.01net.com/actualites/microsoft-corrige-pres-de-130-failles-de-securite-dont-dix-critiques-et-deux-zero-day-2055872.html

Russian Hackers Tried Attacking Ukraine’s Power Grid with Industroyer2 Malware

Russian Hackers Tried Attacking Ukraine’s Power Grid with Industroyer2 Malware

,

The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday disclosed that it thwarted a cyberattack by Sandworm, a hacking group affiliated with Russia’s military intelligence, to sabotage the operations of an unnamed energy provider in the country.
« The attackers attempted to take down several infrastructure components of their target, namely: Electrical substations, Windows-operated

,

The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday disclosed that it thwarted a cyberattack by Sandworm, a hacking group affiliated with Russia’s military intelligence, to sabotage the operations of an unnamed energy provider in the country.
« The attackers attempted to take down several infrastructure components of their target, namely: Electrical substations, Windows-operated

, ,
https://thehackernews.com/2022/04/russian-hackers-tried-attacking.html

FBI, Europol Seize RaidForums Hacker Forum and Arrest Admin

FBI, Europol Seize RaidForums Hacker Forum and Arrest Admin,

An international law enforcement operation raided and took down RaidForums, one of the world’s largest hacking forums notorious for selling access to hacked personal information belonging to users.
Dubbed Tourniquet, the seizure of the cybercrime website involved authorities from the U.S., U.K., Sweden, Portugal, and Romania, with the criminal investigation resulting in the arrest of the forum’s

,

An international law enforcement operation raided and took down RaidForums, one of the world’s largest hacking forums notorious for selling access to hacked personal information belonging to users.
Dubbed Tourniquet, the seizure of the cybercrime website involved authorities from the U.S., U.K., Sweden, Portugal, and Romania, with the criminal investigation resulting in the arrest of the forum’s

, ,
https://thehackernews.com/2022/04/fbi-europol-seize-raidforums-hacker.html

Ils utilisent un ransomware de hackers russes… pour attaquer les Russes

Ils utilisent un ransomware de hackers russes… pour attaquer les Russes,

Des pirates soutenant la cause ukrainienne ont copié le code source du ransomware Conti et le diffusent dans des entreprises russes, par vengeance.

,

Des pirates soutenant la cause ukrainienne ont copié le code source du ransomware Conti et le diffusent dans des entreprises russes, par vengeance.

, ,
https://www.01net.com/actualites/ils-utilisent-un-ransomware-de-hackers-russes-pour-attaquer-les-russes-2055854.html

Microsoft Issues Patches for 2 Windows Zero-Days and 126 Other Vulnerabilities

Microsoft Issues Patches for 2 Windows Zero-Days and 126 Other Vulnerabilities,

Microsoft’s Patch Tuesday updates for the month of April have addressed a total of 128 security vulnerabilities spanning across its software product portfolio, including Windows, Defender, Office, Exchange Server, Visual Studio, and Print Spooler, among others.
10 of the 128 bugs fixed are rated Critical, 115 are rated Important, and three are rated Moderate in severity, with one of the flaws

,

Microsoft’s Patch Tuesday updates for the month of April have addressed a total of 128 security vulnerabilities spanning across its software product portfolio, including Windows, Defender, Office, Exchange Server, Visual Studio, and Print Spooler, among others.
10 of the 128 bugs fixed are rated Critical, 115 are rated Important, and three are rated Moderate in severity, with one of the flaws

, ,
https://thehackernews.com/2022/04/microsoft-issues-patches-for-2-windows.html

Cross-Regional Disaster Recovery with Elasticsearch

Cross-Regional Disaster Recovery with Elasticsearch,

Unsurprisingly, here at Rewind, we’ve got a lot of data to protect (over 2 petabytes worth). One of the databases we use is called Elasticsearch (ES or Opensearch, as it is currently known in AWS). To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is essential when customers are looking for a particular file or item that they need to restore using 

,

Unsurprisingly, here at Rewind, we’ve got a lot of data to protect (over 2 petabytes worth). One of the databases we use is called Elasticsearch (ES or Opensearch, as it is currently known in AWS). To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is essential when customers are looking for a particular file or item that they need to restore using 

, ,
https://thehackernews.com/2022/04/cross-regional-disaster-recovery-with.html

Critical LFI Vulnerability Reported in Hashnode Blogging Platform

Critical LFI Vulnerability Reported in Hashnode Blogging Platform,

Researchers have disclosed a previously undocumented local file inclusion (LFI) vulnerability in Hashnode, a developer-oriented blogging platform, that could be abused to access sensitive data such as SSH keys, server’s IP address, and other network information.
« The LFI originates in a Bulk Markdown Import feature that can be manipulated to provide attackers with unimpeded ability to download

,

Researchers have disclosed a previously undocumented local file inclusion (LFI) vulnerability in Hashnode, a developer-oriented blogging platform, that could be abused to access sensitive data such as SSH keys, server’s IP address, and other network information.
« The LFI originates in a Bulk Markdown Import feature that can be manipulated to provide attackers with unimpeded ability to download

, ,
https://thehackernews.com/2022/04/critical-lfi-vulnerability-reported-in.html

EU Officials Reportedly Targeted with Israeli Pegasus Spyware

EU Officials Reportedly Targeted with Israeli Pegasus Spyware,

Senior officials in the European Union were allegedly targeted with NSO Group’s infamous Pegasus surveillance tool, according to a new report from Reuters.
At least five individuals, including European Justice Commissioner Didier Reynders, are said to have been singled out in total, the news agency said, citing documents and two unnamed E.U. officials. However, it’s not clear who used the

,

Senior officials in the European Union were allegedly targeted with NSO Group’s infamous Pegasus surveillance tool, according to a new report from Reuters.
At least five individuals, including European Justice Commissioner Didier Reynders, are said to have been singled out in total, the news agency said, citing documents and two unnamed E.U. officials. However, it’s not clear who used the

, ,
https://thehackernews.com/2022/04/eu-officials-reportedly-targeted-with.html