The 4 Keys to Building Cloud Security Programs That Can Actually Shift Left

The 4 Keys to Building Cloud Security Programs That Can Actually Shift Left,

As cloud applications are built, tested and updated, they wind their way through an ever-complex series of different tools and teams. Across hundreds or even thousands of technologies that make up the patchwork quilt of development and cloud environments, security processes are all too often applied in only the final phases of software development. 
Placing security at the very end of the

,

As cloud applications are built, tested and updated, they wind their way through an ever-complex series of different tools and teams. Across hundreds or even thousands of technologies that make up the patchwork quilt of development and cloud environments, security processes are all too often applied in only the final phases of software development. 
Placing security at the very end of the

, ,
https://thehackernews.com/2023/07/the-4-keys-to-building-cloud-security.html

Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining

Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining,

Misconfigured and poorly secured Apache Tomcat servers are being targeted as part of a new campaign designed to deliver the Mirai botnet malware and cryptocurrency miners.
The findings come courtesy of Aqua, which detected more than 800 attacks against its Tomcat server honeypots over a two-year time period, with 96% of the attacks linked to the Mirai botnet.
Of these attack attempts, 20% (or

,

Misconfigured and poorly secured Apache Tomcat servers are being targeted as part of a new campaign designed to deliver the Mirai botnet malware and cryptocurrency miners.
The findings come courtesy of Aqua, which detected more than 800 attacks against its Tomcat server honeypots over a two-year time period, with 96% of the attacks linked to the Mirai botnet.
Of these attack attempts, 20% (or

, ,
https://thehackernews.com/2023/07/hackers-target-apache-tomcat-servers.html

Group-IB Co-Founder Sentenced to 14 Years in Russian Prison for Alleged High Treason

Group-IB Co-Founder Sentenced to 14 Years in Russian Prison for Alleged High Treason,

A city court in Moscow on Wednesday convicted Group-IB co-founder and CEO Ilya Sachkov of « high treason » and jailed him for 14 years in a « strict regime colony » over accusations of passing information to foreign spies.
« The court found Sachkov guilty under Article 275 of the Russian Criminal Code (high treason) sentencing him to 14 years of incarceration in a maximum-security jail, restriction

,

A city court in Moscow on Wednesday convicted Group-IB co-founder and CEO Ilya Sachkov of « high treason » and jailed him for 14 years in a « strict regime colony » over accusations of passing information to foreign spies.
« The court found Sachkov guilty under Article 275 of the Russian Criminal Code (high treason) sentencing him to 14 years of incarceration in a maximum-security jail, restriction

, ,
https://thehackernews.com/2023/07/group-ib-co-founder-sentenced-to-14.html

New SEC Rules Require U.S. Companies to Reveal Cyber Attacks Within 4 Days

New SEC Rules Require U.S. Companies to Reveal Cyber Attacks Within 4 Days,

The U.S. Securities and Exchange Commission (SEC) on Wednesday approved new rules that require publicly traded companies to publicize details of a cyber attack within four days of identifying that it has a « material » impact on their finances, marking a major shift in how computer breaches are disclosed.
« Whether a company loses a factory in a fire — or millions of files in a cybersecurity

,

The U.S. Securities and Exchange Commission (SEC) on Wednesday approved new rules that require publicly traded companies to publicize details of a cyber attack within four days of identifying that it has a « material » impact on their finances, marking a major shift in how computer breaches are disclosed.
« Whether a company loses a factory in a fire — or millions of files in a cybersecurity

, ,
https://thehackernews.com/2023/07/new-sec-rules-require-us-companies-to.html

Decoy Dog: New Breed of Malware Posing Serious Threats to Enterprise Networks

Decoy Dog: New Breed of Malware Posing Serious Threats to Enterprise Networks,

A deeper analysis of a recently discovered malware called Decoy Dog has revealed that it’s a significant upgrade over the Pupy RAT, an open-source remote access trojan it’s modeled on.
« Decoy Dog has a full suite of powerful, previously unknown capabilities – including the ability to move victims to another controller, allowing them to maintain communication with compromised machines and remain

,

A deeper analysis of a recently discovered malware called Decoy Dog has revealed that it’s a significant upgrade over the Pupy RAT, an open-source remote access trojan it’s modeled on.
« Decoy Dog has a full suite of powerful, previously unknown capabilities – including the ability to move victims to another controller, allowing them to maintain communication with compromised machines and remain

, ,
https://thehackernews.com/2023/07/decoy-dog-new-breed-of-malware-posing.html

The Alarming Rise of Infostealers: How to Detect this Silent Threat

The Alarming Rise of Infostealers: How to Detect this Silent Threat,

A new study conducted by Uptycs has uncovered a stark increase in the distribution of information stealing (a.k.a. infostealer or stealer) malware. Incidents have more than doubled in Q1 2023, indicating an alarming trend that threatens global organizations.
According to the new Uptycs’ whitepaper, Stealers are Organization Killers, a variety of new info stealers have emerged this year, preying

,

A new study conducted by Uptycs has uncovered a stark increase in the distribution of information stealing (a.k.a. infostealer or stealer) malware. Incidents have more than doubled in Q1 2023, indicating an alarming trend that threatens global organizations.
According to the new Uptycs’ whitepaper, Stealers are Organization Killers, a variety of new info stealers have emerged this year, preying

, ,
https://thehackernews.com/2023/07/the-alarming-rise-of-infostealers-how.html

Fenix Cybercrime Group Poses as Tax Authorities to Target Latin American Users

Fenix Cybercrime Group Poses as Tax Authorities to Target Latin American Users,

Tax-paying individuals in Mexico and Chile have been targeted by a Mexico-based cybercrime group that goes by the name Fenix to breach targeted networks and steal valuable data.
A key hallmark of the operation entails cloning official portals of the Servicio de Administración Tributaria (SAT) in Mexico and the Servicio de Impuestos Internos (SII) in Chile and redirecting potential victims to

,

Tax-paying individuals in Mexico and Chile have been targeted by a Mexico-based cybercrime group that goes by the name Fenix to breach targeted networks and steal valuable data.
A key hallmark of the operation entails cloning official portals of the Servicio de Administración Tributaria (SAT) in Mexico and the Servicio de Impuestos Internos (SII) in Chile and redirecting potential victims to

, ,
https://thehackernews.com/2023/07/fenix-cybercrime-group-poses-as-tax.html

New AI Tool ‘FraudGPT’ Emerges, Tailored for Sophisticated Attacks

New AI Tool ‘FraudGPT’ Emerges, Tailored for Sophisticated Attacks

,

Following the footsteps of WormGPT, threat actors are advertising yet another cybercrime generative artificial intelligence (AI) tool dubbed FraudGPT on various dark web marketplaces and Telegram channels.
« This is an AI bot, exclusively targeted for offensive purposes, such as crafting spear phishing emails, creating cracking tools, carding, etc., » Netenrich security researcher Rakesh Krishnan 

,

Following the footsteps of WormGPT, threat actors are advertising yet another cybercrime generative artificial intelligence (AI) tool dubbed FraudGPT on various dark web marketplaces and Telegram channels.
« This is an AI bot, exclusively targeted for offensive purposes, such as crafting spear phishing emails, creating cracking tools, carding, etc., » Netenrich security researcher Rakesh Krishnan 

, ,
https://thehackernews.com/2023/07/new-ai-tool-fraudgpt-emerges-tailored.html

Rust-based Realst Infostealer Targeting Apple macOS Users’ Cryptocurrency Wallets

Rust-based Realst Infostealer Targeting Apple macOS Users’ Cryptocurrency Wallets

,

A new malware family called Realst has become the latest to target Apple macOS systems, with a third of the samples already designed to infect macOS 14 Sonoma, the upcoming major release of the operating system.
Written in the Rust programming language, the malware is distributed in the form of bogus blockchain games and is capable of « emptying crypto wallets and stealing stored password and

,

A new malware family called Realst has become the latest to target Apple macOS systems, with a third of the samples already designed to infect macOS 14 Sonoma, the upcoming major release of the operating system.
Written in the Rust programming language, the malware is distributed in the form of bogus blockchain games and is capable of « emptying crypto wallets and stealing stored password and

, ,
https://thehackernews.com/2023/07/rust-based-realst-infostealer-targeting.html

Critical MikroTik RouterOS Vulnerability Exposes Over Half a Million Devices to Hacking

Critical MikroTik RouterOS Vulnerability Exposes Over Half a Million Devices to Hacking,

A severe privilege escalation issue impacting MikroTik RouterOS could be weaponized by remote malicious actors to execute arbitrary code and seize full control of vulnerable devices.
Cataloged as CVE-2023-30799 (CVSS score: 9.1), the shortcoming is expected to put approximately 500,000 and 900,000 RouterOS systems at risk of exploitation via their web and/or Winbox interfaces, respectively,

,

A severe privilege escalation issue impacting MikroTik RouterOS could be weaponized by remote malicious actors to execute arbitrary code and seize full control of vulnerable devices.
Cataloged as CVE-2023-30799 (CVSS score: 9.1), the shortcoming is expected to put approximately 500,000 and 900,000 RouterOS systems at risk of exploitation via their web and/or Winbox interfaces, respectively,

, ,
https://thehackernews.com/2023/07/critical-mikrotik-routeros.html