4 Places to Supercharge Your SOC with Automation

4 Places to Supercharge Your SOC with Automation,

It’s no secret that the job of SOC teams continues to become increasingly difficult. Increased volume and sophistication of attacks are plaguing under-resourced teams with false positives and analyst burnout.
However, like many other industries, cybersecurity is now beginning to lean on and benefit from advancements in automation to not only maintain the status quo, but to attain better security

,

It’s no secret that the job of SOC teams continues to become increasingly difficult. Increased volume and sophistication of attacks are plaguing under-resourced teams with false positives and analyst burnout.
However, like many other industries, cybersecurity is now beginning to lean on and benefit from advancements in automation to not only maintain the status quo, but to attain better security

, ,
https://thehackernews.com/2023/01/4-places-to-supercharge-your-soc-with.html

Zoho ManageEngine PoC Exploit to be Released Soon – Patch Before It’s Too Late!

Zoho ManageEngine PoC Exploit to be Released Soon – Patch Before It’s Too Late!

,

Users of Zoho ManageEngine are being urged to patch their instances against a critical security vulnerability ahead of the release of a proof-of-concept (PoC) exploit code.
The issue in question is CVE-2022-47966, an unauthenticated remote code execution vulnerability affecting several products due to the use of an outdated third-party dependency, Apache Santuario.
« This vulnerability allows an

,

Users of Zoho ManageEngine are being urged to patch their instances against a critical security vulnerability ahead of the release of a proof-of-concept (PoC) exploit code.
The issue in question is CVE-2022-47966, an unauthenticated remote code execution vulnerability affecting several products due to the use of an outdated third-party dependency, Apache Santuario.
« This vulnerability allows an

, ,
https://thehackernews.com/2023/01/zoho-manageengine-poc-exploit-to-be.html

Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems

Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems,

A threat actor by the name Lolip0p has uploaded three rogue packages to the Python Package Index (PyPI) repository that are designed to drop malware on compromised developer systems.
The packages – named colorslib (versions 4.6.11 and 4.6.12), httpslib (versions 4.6.9 and 4.6.11), and libhttps (version 4.6.12) – by the author between January 7, 2023, and January 12, 2023. They have since been

,

A threat actor by the name Lolip0p has uploaded three rogue packages to the Python Package Index (PyPI) repository that are designed to drop malware on compromised developer systems.
The packages – named colorslib (versions 4.6.11 and 4.6.12), httpslib (versions 4.6.9 and 4.6.11), and libhttps (version 4.6.12) – by the author between January 7, 2023, and January 12, 2023. They have since been

, ,
https://thehackernews.com/2023/01/researchers-uncover-3-pypi-packages.html

NFT : un collectionneur a tout perdu… à cause d’une pub sur Google

NFT : un collectionneur a tout perdu… à cause d’une pub sur Google,

nft marché effondre adoption continue

Un collectionneur de NFT vient d’être dépouillé par des pirates. En l’espace de quelques heures, il a perdu l’intégralité de ses avoirs numériques, dont ses cryptomonnaies. Il pointe du doigt une publicité sur Google cachant un malware.

,

nft marché effondre adoption continue

Un collectionneur de NFT vient d’être dépouillé par des pirates. En l’espace de quelques heures, il a perdu l’intégralité de ses avoirs numériques, dont ses cryptomonnaies. Il pointe du doigt une publicité sur Google cachant un malware.

, ,
https://www.01net.com/actualites/nft-un-collectionneur-a-tout-perdu-a-cause-dune-pub-sur-google.html

Raccoon and Vidar Stealers Spreading via Massive Network of Fake Cracked Software

Raccoon and Vidar Stealers Spreading via Massive Network of Fake Cracked Software,

A « large and resilient infrastructure » comprising over 250 domains is being used to distribute information-stealing malware such as Raccoon and Vidar since early 2020.
The infection chain « uses about a hundred of fake cracked software catalogue websites that redirect to several links before downloading the payload hosted on file share platforms, such as GitHub, » cybersecurity firm SEKOIA said in

,

A « large and resilient infrastructure » comprising over 250 domains is being used to distribute information-stealing malware such as Raccoon and Vidar since early 2020.
The infection chain « uses about a hundred of fake cracked software catalogue websites that redirect to several links before downloading the payload hosted on file share platforms, such as GitHub, » cybersecurity firm SEKOIA said in

, ,
https://thehackernews.com/2023/01/raccoon-and-vidar-stealers-spreading.html

A Secure User Authentication Method – Planning is More Important than Ever

A Secure User Authentication Method – Planning is More Important than Ever,

When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability. Organizations cannot always be judged on those metrics alone. There is an increasing need to evaluate company ownership, policies and the stability, or instability, that it brings.
How Leadership Change Affects Stability
In recent months, a salient example

,

When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability. Organizations cannot always be judged on those metrics alone. There is an increasing need to evaluate company ownership, policies and the stability, or instability, that it brings.
How Leadership Change Affects Stability
In recent months, a salient example

, ,
https://thehackernews.com/2023/01/a-secure-user-authentication-method.html

CISA Warns for Flaws Affecting Industrial Control Systems from Major Manufacturers

CISA Warns for Flaws Affecting Industrial Control Systems from Major Manufacturers,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released several Industrial Control Systems (ICS) advisories warning of critical security flaws affecting products from Sewio, InHand Networks, Sauter Controls, and Siemens.
The most severe of the flaws relate to Sewio’s RTLS Studio, which could be exploited by an attacker to « obtain unauthorized access to the server, alter

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released several Industrial Control Systems (ICS) advisories warning of critical security flaws affecting products from Sewio, InHand Networks, Sauter Controls, and Siemens.
The most severe of the flaws relate to Sewio’s RTLS Studio, which could be exploited by an attacker to « obtain unauthorized access to the server, alter

, ,
https://thehackernews.com/2023/01/cisa-warns-for-flaws-affecting.html

New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild

New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild

,

Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency (CIA)’s Hive multi-platform malware suite, the source code of which was released by WikiLeaks in November 2017.
« This is the first time we caught a variant of the CIA Hive attack kit in the wild, and we named it xdr33 based on its embedded Bot-side certificate CN=xdr33, »

,

Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency (CIA)’s Hive multi-platform malware suite, the source code of which was released by WikiLeaks in November 2017.
« This is the first time we caught a variant of the CIA Hive attack kit in the wild, and we named it xdr33 based on its embedded Bot-side certificate CN=xdr33, »

, ,
https://thehackernews.com/2023/01/new-backdoor-created-using-leaked-cias.html

Norton : des milliers de comptes piratés, les mots de passe dans la nature

Norton : des milliers de comptes piratés, les mots de passe dans la nature,

cadenas securite mot de passe

Norton, l’entreprise derrière le célèbre antivirus, a annoncé à ses clients que leur compte a été compromis au cours des dernières semaines. Une faille de sécurité qui a également permis aux pirates d’accéder au gestionnaire de mot de passe proposé par la marque.

,

cadenas securite mot de passe

Norton, l’entreprise derrière le célèbre antivirus, a annoncé à ses clients que leur compte a été compromis au cours des dernières semaines. Une faille de sécurité qui a également permis aux pirates d’accéder au gestionnaire de mot de passe proposé par la marque.

, ,
https://www.01net.com/actualites/norton-des-milliers-de-comptes-pirates-les-mots-de-passe-dans-la-nature.html

Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident

Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident

,

DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee’s laptop and leveraged malware to steal their two-factor authentication-backed credentials to breach the company’s systems and data last month.
The CI/CD service CircleCI said the « sophisticated attack » took place on December 16, 2022, and that the malware went undetected by its antivirus

,

DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee’s laptop and leveraged malware to steal their two-factor authentication-backed credentials to breach the company’s systems and data last month.
The CI/CD service CircleCI said the « sophisticated attack » took place on December 16, 2022, and that the malware went undetected by its antivirus

, ,
https://thehackernews.com/2023/01/malware-attack-on-circleci-engineers.html