Webinar — A MythBusting Special: 9 Myths about File-based Threats

Webinar — A MythBusting Special: 9 Myths about File-based Threats,

Bad actors love to deliver threats in files. Persistent and persuasive messages convince unsuspecting victims to accept and open files from unknown sources, executing the first step in a cyber attack. 
This continues to happen whether the file is an EXE or a Microsoft Excel document. Far too often, end users have an illusion of security, masked by good faith efforts of other users and (

,

Bad actors love to deliver threats in files. Persistent and persuasive messages convince unsuspecting victims to accept and open files from unknown sources, executing the first step in a cyber attack. 
This continues to happen whether the file is an EXE or a Microsoft Excel document. Far too often, end users have an illusion of security, masked by good faith efforts of other users and (

, ,
https://thehackernews.com/2023/02/webinar-mythbusting-special-9-myths.html

Financially Motivated Threat Actor Strikes with New Ransomware and Clipper Malware

Financially Motivated Threat Actor Strikes with New Ransomware and Clipper Malware,

A new financially motivated campaign that commenced in December 2022 has seen the unidentified threat actor behind it deploying a novel ransomware strain dubbed MortalKombat and a clipper malware known as Laplas.
Cisco Talos said it « observed the actor scanning the internet for victim machines with an exposed remote desktop protocol (RDP) port 3389. »
The attacks, per the cybersecurity company,

,

A new financially motivated campaign that commenced in December 2022 has seen the unidentified threat actor behind it deploying a novel ransomware strain dubbed MortalKombat and a clipper malware known as Laplas.
Cisco Talos said it « observed the actor scanning the internet for victim machines with an exposed remote desktop protocol (RDP) port 3389. »
The attacks, per the cybersecurity company,

, ,
https://thehackernews.com/2023/02/financially-motivated-threat-actor.html

Regular Pen Testing Is Key to Resolving Conflict Between SecOps and DevOps

Regular Pen Testing Is Key to Resolving Conflict Between SecOps and DevOps,

In an ideal world, security and development teams would be working together in perfect harmony. But we live in a world of competing priorities, where DevOps and security departments often butt heads with each other.
Agility and security are often at odds with each other— if a new feature is delivered quickly but contains security vulnerabilities, the SecOps team will need to scramble the release

,

In an ideal world, security and development teams would be working together in perfect harmony. But we live in a world of competing priorities, where DevOps and security departments often butt heads with each other.
Agility and security are often at odds with each other— if a new feature is delivered quickly but contains security vulnerabilities, the SecOps team will need to scramble the release

, ,
https://thehackernews.com/2023/02/regular-pen-testing-is-key-to-resolving.html

Experts Warn of ‘Beep’ – A New Evasive Malware That Can Fly Under the Radar

Experts Warn of ‘Beep’ – A New Evasive Malware That Can Fly Under the Radar

,

Cybersecurity researchers have unearthed a new piece of evasive malware dubbed Beep that’s designed to fly under the radar and drop additional payloads onto a compromised host.
« It seemed as if the authors of this malware were trying to implement as many anti-debugging and anti-VM (anti-sandbox) techniques as they could find, » Minerva Labs researcher Natalie Zargarov said.
« One such technique

,

Cybersecurity researchers have unearthed a new piece of evasive malware dubbed Beep that’s designed to fly under the radar and drop additional payloads onto a compromised host.
« It seemed as if the authors of this malware were trying to implement as many anti-debugging and anti-VM (anti-sandbox) techniques as they could find, » Minerva Labs researcher Natalie Zargarov said.
« One such technique

, ,
https://thehackernews.com/2023/02/experts-warn-of-beep-new-evasive.html

Google Rolling Out Privacy Sandbox Beta on Android 13 Devices

Google Rolling Out Privacy Sandbox Beta on Android 13 Devices,

Google announced on Tuesday that it’s officially rolling out Privacy Sandbox on Android in beta to eligible mobile devices running Android 13.
« The Privacy Sandbox Beta provides new APIs that are designed with privacy at the core, and don’t use identifiers that can track your activity across apps and websites, » the search and advertising giant said. « Apps that choose to participate in the Beta

,

Google announced on Tuesday that it’s officially rolling out Privacy Sandbox on Android in beta to eligible mobile devices running Android 13.
« The Privacy Sandbox Beta provides new APIs that are designed with privacy at the core, and don’t use identifiers that can track your activity across apps and websites, » the search and advertising giant said. « Apps that choose to participate in the Beta

, ,
https://thehackernews.com/2023/02/google-rolling-out-privacy-sandbox-beta.html

Update Now: Microsoft Releases Patches for 3 Actively Exploited Windows Vulnerabilities

Update Now: Microsoft Releases Patches for 3 Actively Exploited Windows Vulnerabilities,

Microsoft on Tuesday released security updates to address 75 flaws spanning its product portfolio, three of which have come under active exploitation in the wild.
The updates are in addition to 22 flaws the Windows maker patched in its Chromium-based Edge browser over the past month.
Of the 75 vulnerabilities, nine are rated Critical and 66 are rated Important in severity. 37 out of 75 bugs are

,

Microsoft on Tuesday released security updates to address 75 flaws spanning its product portfolio, three of which have come under active exploitation in the wild.
The updates are in addition to 22 flaws the Windows maker patched in its Chromium-based Edge browser over the past month.
Of the 75 vulnerabilities, nine are rated Critical and 66 are rated Important in severity. 37 out of 75 bugs are

, ,
https://thehackernews.com/2023/02/update-now-microsoft-releases-patches.html

Windows 11 : Microsoft vient de corriger 77 failles de sécurité, dont trois zero day

Windows 11 : Microsoft vient de corriger 77 failles de sécurité, dont trois zero day,

Windows 11

Microsoft vient de publier sa dernière mise à jour de sécurité pour Windows 11. En plus des quelques 77 failles de sécurités qui ont été corrigées, le patch Tuesday de février a également permis de colmater trois failles zero day activement exploitées.

,

Windows 11

Microsoft vient de publier sa dernière mise à jour de sécurité pour Windows 11. En plus des quelques 77 failles de sécurités qui ont été corrigées, le patch Tuesday de février a également permis de colmater trois failles zero day activement exploitées.

, ,
https://www.01net.com/actualites/windows-11-microsoft-vient-de-corriger-77-failles-de-securite-dont-3-zero-day.html

Massive AdSense Fraud Campaign Uncovered – 10,000+ WordPress Sites Infected

Massive AdSense Fraud Campaign Uncovered – 10,000+ WordPress Sites Infected,

The threat actors behind the black hat redirect malware campaign have scaled up their campaign to use more than 70 bogus domains mimicking URL shorteners and infected over 10,800 websites.
« The main objective is still ad fraud by artificially increasing traffic to pages which contain the AdSense ID which contain Google ads for revenue generation, » Sucuri researcher Ben Martin said in a report

,

The threat actors behind the black hat redirect malware campaign have scaled up their campaign to use more than 70 bogus domains mimicking URL shorteners and infected over 10,800 websites.
« The main objective is still ad fraud by artificially increasing traffic to pages which contain the AdSense ID which contain Google ads for revenue generation, » Sucuri researcher Ben Martin said in a report

, ,
https://thehackernews.com/2023/02/massive-adsense-fraud-campaign.html

Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!,

Malicious actors have published more than 451 unique Python packages on the official Python Package Index (PyPI) repository in an attempt to infect developer systems with clipper malware.
Software supply chain security company Phylum, which spotted the libraries, said the ongoing activity is a follow-up to a campaign that was initially disclosed in November 2022.
The initial vector entails using

,

Malicious actors have published more than 451 unique Python packages on the official Python Package Index (PyPI) repository in an attempt to infect developer systems with clipper malware.
Software supply chain security company Phylum, which spotted the libraries, said the ongoing activity is a follow-up to a campaign that was initially disclosed in November 2022.
The initial vector entails using

, ,
https://thehackernews.com/2023/02/python-developers-beware-clipper.html

A CISOs Practical Guide to Storage and Backup Ransomware Resiliency

A CISOs Practical Guide to Storage and Backup Ransomware Resiliency,

One thing is clear. The « business value » of data continues to grow, making it an organization’s primary piece of intellectual property.
From a cyber risk perspective, attacks on data are the most prominent threat to organizations. 
Regulators, cyber insurance firms, and auditors are paying much closer attention to the integrity, resilience, and recoverability of organization data – as well as

,

One thing is clear. The « business value » of data continues to grow, making it an organization’s primary piece of intellectual property.
From a cyber risk perspective, attacks on data are the most prominent threat to organizations. 
Regulators, cyber insurance firms, and auditors are paying much closer attention to the integrity, resilience, and recoverability of organization data – as well as

, ,
https://thehackernews.com/2023/02/a-cisos-practical-guide-to-storage-and.html