3 Overlooked Cybersecurity Breaches

3 Overlooked Cybersecurity Breaches,

Here are three of the worst breaches, attacker tactics and techniques of 2022, and the security controls that can provide effective, enterprise security protection for them.
#1: 2 RaaS Attacks in 13 Months
Ransomware as a service is a type of attack in which the ransomware software and infrastructure are leased out to the attackers. These ransomware services can be purchased on the dark web from

,

Here are three of the worst breaches, attacker tactics and techniques of 2022, and the security controls that can provide effective, enterprise security protection for them.
#1: 2 RaaS Attacks in 13 Months
Ransomware as a service is a type of attack in which the ransomware software and infrastructure are leased out to the attackers. These ransomware services can be purchased on the dark web from

, ,
https://thehackernews.com/2023/02/3-overlooked-cybersecurity-breaches.html

U.K. and U.S. Sanction 7 Russians for TrickBot, Ryuk, and Conti Ransomware Attacks

U.K. and U.S. Sanction 7 Russians for TrickBot, Ryuk, and Conti Ransomware Attacks,

In a first-of-its-kind coordinated action, the U.K. and U.S. governments on Thursday levied sanctions against seven Russian nationals for their affiliation to the TrickBot, Ryuk, and Conti cybercrime operation.
The individuals designated under sanctions are Vitaly Kovalev (aka Alex Konor, Bentley, or Bergen), Maksim Mikhailov (aka Baget), Valentin Karyagin (aka Globus), Mikhail Iskritskiy (aka

,

In a first-of-its-kind coordinated action, the U.K. and U.S. governments on Thursday levied sanctions against seven Russian nationals for their affiliation to the TrickBot, Ryuk, and Conti cybercrime operation.
The individuals designated under sanctions are Vitaly Kovalev (aka Alex Konor, Bentley, or Bergen), Maksim Mikhailov (aka Baget), Valentin Karyagin (aka Globus), Mikhail Iskritskiy (aka

, ,
https://thehackernews.com/2023/02/uk-and-us-sanction-7-russians-for.html

Reddit Suffers Security Breach Exposing Internal Documents and Source Code

Reddit Suffers Security Breach Exposing Internal Documents and Source Code,

Popular social news aggregation platform Reddit has disclosed that it was the victim of a security incident that enabled unidentified threat actors to gain unauthorized access to internal documents, code, and some unspecified business systems.
The company blamed it on a « sophisticated and highly-targeted phishing attack » that took place on February 5, 2023, targeting its employees.
The attack

,

Popular social news aggregation platform Reddit has disclosed that it was the victim of a security incident that enabled unidentified threat actors to gain unauthorized access to internal documents, code, and some unspecified business systems.
The company blamed it on a « sophisticated and highly-targeted phishing attack » that took place on February 5, 2023, targeting its employees.
The attack

, ,
https://thehackernews.com/2023/02/reddit-suffers-security-breach-exposing.html

Critical Infrastructure at Risk from New Vulnerabilities Found in Wireless IIoT Devices

Critical Infrastructure at Risk from New Vulnerabilities Found in Wireless IIoT Devices,

A set of 38 security vulnerabilities has been uncovered in wireless industrial internet of things (IIoT) devices from four different vendors that could pose a significant attack surface for threat actors looking to exploit operational technology (OT) environments.
« Threat actors can exploit vulnerabilities in Wireless IIoT devices to gain initial access to internal OT networks, » Israeli

,

A set of 38 security vulnerabilities has been uncovered in wireless industrial internet of things (IIoT) devices from four different vendors that could pose a significant attack surface for threat actors looking to exploit operational technology (OT) environments.
« Threat actors can exploit vulnerabilities in Wireless IIoT devices to gain initial access to internal OT networks, » Israeli

, ,
https://thehackernews.com/2023/02/critical-infrastructure-at-risk-from.html

THN Webinar – Learn How to Comply with New Cyber Insurance Identity Security Requirements

THN Webinar – Learn How to Comply with New Cyber Insurance Identity Security Requirements,

The Hacker News is thrilled to announce the launch of our new educational webinar series, in collaboration with the leading cybersecurity companies in the industry! Get ready to dive into the world of enterprise-level security with expert guests who will share their vast knowledge and provide you with valuable insights and information on various security topics.
Whether you’re a seasoned

,

The Hacker News is thrilled to announce the launch of our new educational webinar series, in collaboration with the leading cybersecurity companies in the industry! Get ready to dive into the world of enterprise-level security with expert guests who will share their vast knowledge and provide you with valuable insights and information on various security topics.
Whether you’re a seasoned

, ,
https://thehackernews.com/2023/02/thn-webinar-learn-how-to-comply-with.html

NewsPenguin Threat Actor Emerges with Malicious Campaign Targeting Pakistani Entities

NewsPenguin Threat Actor Emerges with Malicious Campaign Targeting Pakistani Entities,

A previously unknown threat actor dubbed NewsPenguin has been linked to a phishing campaign targeting Pakistani entities by leveraging the upcoming international maritime expo as a lure.
« The attacker sent out targeted phishing emails with a weaponized document attached that purports to be an exhibitor manual for PIMEC-23, » the BlackBerry Research and Intelligence Team said.
PIMEC, short for

,

A previously unknown threat actor dubbed NewsPenguin has been linked to a phishing campaign targeting Pakistani entities by leveraging the upcoming international maritime expo as a lure.
« The attacker sent out targeted phishing emails with a weaponized document attached that purports to be an exhibitor manual for PIMEC-23, » the BlackBerry Research and Intelligence Team said.
PIMEC, short for

, ,
https://thehackernews.com/2023/02/newspenguin-threat-actor-emerges-with.html

Netflix : pourquoi Kaspersky dénonce cette série à succès

Netflix : pourquoi Kaspersky dénonce cette série à succès,

netflix

Netflix est dans le collimateur de Kaspersky. D’après la firme spécialisée dans la sécurité informatique, l’une des séries phares du service banalise le harcèlement en ligne et les comportements toxiques.

,

netflix

Netflix est dans le collimateur de Kaspersky. D’après la firme spécialisée dans la sécurité informatique, l’une des séries phares du service banalise le harcèlement en ligne et les comportements toxiques.

, ,
https://www.01net.com/actualites/netflix-pourquoi-kaspersky-denonce-cette-serie-a-succes.html

A Hackers Pot of Gold: Your MSP’s Data

A Hackers Pot of Gold: Your MSP’s Data

,

A single ransomware attack on a New Zealand managed service provider (MSP) disrupted several of its clients’ business operations overnight, most belonging to the healthcare sector. According to the country’s privacy commissioner, « a cyber security incident involving a ransomware attack » in late November upended the daily operations of New Zealand’s health ministry when it prevented the staff

,

A single ransomware attack on a New Zealand managed service provider (MSP) disrupted several of its clients’ business operations overnight, most belonging to the healthcare sector. According to the country’s privacy commissioner, « a cyber security incident involving a ransomware attack » in late November upended the daily operations of New Zealand’s health ministry when it prevented the staff

, ,
https://thehackernews.com/2023/02/a-hackers-pot-of-gold-your-msps-data.html

Gootkit Malware Adopts New Tactics to Attack Healthcare and Finance Firms

Gootkit Malware Adopts New Tactics to Attack Healthcare and Finance Firms,

The Gootkit malware is prominently going after healthcare and finance organizations in the U.S., U.K., and Australia, according to new findings from Cybereason.
The cybersecurity firm said it investigated a Gootkit incident in December 2022 that adopted a new method of deployment, with the actors abusing the foothold to deliver Cobalt Strike and SystemBC for post-exploitation.
« The threat actor

,

The Gootkit malware is prominently going after healthcare and finance organizations in the U.S., U.K., and Australia, according to new findings from Cybereason.
The cybersecurity firm said it investigated a Gootkit incident in December 2022 that adopted a new method of deployment, with the actors abusing the foothold to deliver Cobalt Strike and SystemBC for post-exploitation.
« The threat actor

, ,
https://thehackernews.com/2023/02/gootkit-malware-adopts-new-tactics-to.html

OpenSSL Fixes Multiple New Security Flaws with Latest Update

OpenSSL Fixes Multiple New Security Flaws with Latest Update,

The OpenSSL Project has released fixes to address several security flaws, including a high-severity bug in the open source encryption toolkit that could potentially expose users to malicious attacks.
Tracked as CVE-2023-0286, the issue relates to a case of type confusion that may permit an adversary to « read memory contents or enact a denial-of-service, » the maintainers said in an advisory.
The

,

The OpenSSL Project has released fixes to address several security flaws, including a high-severity bug in the open source encryption toolkit that could potentially expose users to malicious attacks.
Tracked as CVE-2023-0286, the issue relates to a case of type confusion that may permit an adversary to « read memory contents or enact a denial-of-service, » the maintainers said in an advisory.
The

, ,
https://thehackernews.com/2023/02/openssl-fixes-multiple-new-security.html