Deep Packet Inspection vs. Metadata Analysis of Network Detection & Response (NDR) Solutions

Deep Packet Inspection vs. Metadata Analysis of Network Detection & Response (NDR) Solutions

,

Today, most Network Detection and Response (NDR) solutions rely on traffic mirroring and Deep Packet Inspection (DPI). Traffic mirroring is typically deployed on a single-core switch to provide a copy of the network traffic to a sensor that uses DPI to thoroughly analyze the payload. While this approach provides detailed analysis, it requires large amounts of processing power and is blind when

,

Today, most Network Detection and Response (NDR) solutions rely on traffic mirroring and Deep Packet Inspection (DPI). Traffic mirroring is typically deployed on a single-core switch to provide a copy of the network traffic to a sensor that uses DPI to thoroughly analyze the payload. While this approach provides detailed analysis, it requires large amounts of processing power and is blind when

, ,
https://thehackernews.com/2022/11/deep-packet-inspection-vs-metadata.html

Researchers Say China State-backed Hackers Breached a Digital Certificate Authority

Researchers Say China State-backed Hackers Breached a Digital Certificate Authority,

A suspected Chinese state-sponsored actor breached a digital certificate authority as well as government and defense agencies located in different countries in Asia as part of an ongoing campaign since at least March 2022.
Symantec, by Broadcom Software, linked the attacks to an adversarial group it tracks under the name Billbug, citing the use of tools previously attributed to this actor. The

,

A suspected Chinese state-sponsored actor breached a digital certificate authority as well as government and defense agencies located in different countries in Asia as part of an ongoing campaign since at least March 2022.
Symantec, by Broadcom Software, linked the attacks to an adversarial group it tracks under the name Billbug, citing the use of tools previously attributed to this actor. The

, ,
https://thehackernews.com/2022/11/researchers-say-china-state-backed.html

Google to Pay $391 Million Privacy Fine for Secretly Tracking Users’ Location

Google to Pay $391 Million Privacy Fine for Secretly Tracking Users’ Location

,

Internet giant Google has agreed to pay a record $391.5 million to settle with 40 states in the U.S. over charges the company misled users about the collection of personal location data.
« Google misled its users into thinking they had turned off location tracking in their account settings, when, in fact, Google continued to collect their location information, » Oregon Attorney General Ellen

,

Internet giant Google has agreed to pay a record $391.5 million to settle with 40 states in the U.S. over charges the company misled users about the collection of personal location data.
« Google misled its users into thinking they had turned off location tracking in their account settings, when, in fact, Google continued to collect their location information, » Oregon Attorney General Ellen

, ,
https://thehackernews.com/2022/11/google-to-pays-391-million-privacy-fine.html

New « Earth Longzhi » APT Targets Ukraine and Asian Countries with Custom Cobalt Strike Loaders

New « Earth Longzhi » APT Targets Ukraine and Asian Countries with Custom Cobalt Strike Loaders

,

Entities located in East and Southeast Asia as well as Ukraine have been targeted at least since 2020 by a previously undocumented subgroup of APT41, a prolific Chinese advanced persistent threat (APT).
Cybersecurity firm Trend Micro, which christened the espionage crew Earth Longzhi, said the actor’s long-running campaign can be split into two based on the toolset deployed to attack its victims

,

Entities located in East and Southeast Asia as well as Ukraine have been targeted at least since 2020 by a previously undocumented subgroup of APT41, a prolific Chinese advanced persistent threat (APT).
Cybersecurity firm Trend Micro, which christened the espionage crew Earth Longzhi, said the actor’s long-running campaign can be split into two based on the toolset deployed to attack its victims

, ,
https://thehackernews.com/2022/11/new-earth-longzhi-apt-targets-ukraine.html

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign,

A new malicious campaign has compromised over 15,000 WordPress websites in an attempt to redirect visitors to bogus Q&A portals.
« These malicious redirects appear to be designed to increase the authority of the attacker’s sites for search engines, » Sucuri researcher Ben Martin said in a report published last week, calling it a « clever black hat SEO trick. »
The search engine poisoning technique

,

A new malicious campaign has compromised over 15,000 WordPress websites in an attempt to redirect visitors to bogus Q&A portals.
« These malicious redirects appear to be designed to increase the authority of the attacker’s sites for search engines, » Sucuri researcher Ben Martin said in a report published last week, calling it a « clever black hat SEO trick. »
The search engine poisoning technique

, ,
https://thehackernews.com/2022/11/over-15000-wordpress-sites-compromised.html

What is an External Penetration Test?

What is an External Penetration Test?,

A penetration test (also known as a pentest) is a security assessment that simulates the activities of real-world attackers to identify security holes in your IT systems or applications. 
The aim of the test is to understand what vulnerabilities you have, how they could be exploited, and what the impact would be if an attacker was successful.
Usually performed first, an external pentest (also

,

A penetration test (also known as a pentest) is a security assessment that simulates the activities of real-world attackers to identify security holes in your IT systems or applications. 
The aim of the test is to understand what vulnerabilities you have, how they could be exploited, and what the impact would be if an attacker was successful.
Usually performed first, an external pentest (also

, ,
https://thehackernews.com/2022/11/what-is-external-penetration-test.html

Cette faille permet à n’importe qui de déverrouiller certains smartphones Android…

Cette faille permet à n’importe qui de déverrouiller certains smartphones Android…,

Un chercheur a trouvé une faille qui permet à n’importe qui d’accéder à un Pixel, et à vraisemblablement beaucoup d’autres smartphones Android, même s’ils sont verrouillés. Après des mois sans retour réel de Google, le correctif vient d’être publié… et une prime lui a été accordée.

,

Un chercheur a trouvé une faille qui permet à n’importe qui d’accéder à un Pixel, et à vraisemblablement beaucoup d’autres smartphones Android, même s’ils sont verrouillés. Après des mois sans retour réel de Google, le correctif vient d’être publié… et une prime lui a été accordée.

, ,
https://www.01net.com/actualites/cette-faille-permet-a-nimporte-qui-de-deverrouiller-certains-smartphones-android.html

New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks

New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks,

A newly discovered evasive malware leverages the Secure Shell (SSH) cryptographic protocol to gain entry into targeted systems with the goal of mining cryptocurrency and carrying out distributed denial-of-service (DDoS) attacks.
Dubbed KmsdBot by the Akamai Security Intelligence Response Team (SIRT), the Golang-based malware has been found targeting a variety of companies ranging from gaming to

,

A newly discovered evasive malware leverages the Secure Shell (SSH) cryptographic protocol to gain entry into targeted systems with the goal of mining cryptocurrency and carrying out distributed denial-of-service (DDoS) attacks.
Dubbed KmsdBot by the Akamai Security Intelligence Response Team (SIRT), the Golang-based malware has been found targeting a variety of companies ranging from gaming to

, ,
https://thehackernews.com/2022/11/new-kmsdbot-malware-hijacking-systems.html

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images,

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor’s infection chain.
Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that’s used to facilitate information theft.
« What is noteworthy is data collection from victims’ machines using

,

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor’s infection chain.
Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that’s used to facilitate information theft.
« What is noteworthy is data collection from victims’ machines using

, ,
https://thehackernews.com/2022/11/worok-hackers-abuse-dropbox-api-to.html

Dark Web : découvrez la folle histoire des 50 000 bitcoins volés à Silk Road en 2012

Dark Web : découvrez la folle histoire des 50 000 bitcoins volés à Silk Road en 2012,

bitcoin popcorn

Il y a dix ans, Silk Road a été piraté. En exploitant une faille, un hacker a volé plus de 50 000 bitcoins sur le marché noir du dark Web, considéré comme l’eBay de la drogue. Au terme d’une longue enquête, cet impressionnant trésor en cryptomonnaies a finalement été retrouvé… au fond d’une boîte de popcorn.

,

bitcoin popcorn

Il y a dix ans, Silk Road a été piraté. En exploitant une faille, un hacker a volé plus de 50 000 bitcoins sur le marché noir du dark Web, considéré comme l’eBay de la drogue. Au terme d’une longue enquête, cet impressionnant trésor en cryptomonnaies a finalement été retrouvé… au fond d’une boîte de popcorn.

, ,
https://www.01net.com/actualites/dark-web-decouvrez-folle-histoire-50000-bitcoins-voles-silk-road-2012.html