Cyber Defense Advisors

Month: December 2022

LastPass Breach

Last August, LastPass reported a security breach, saying that no customer information—or passwords—were compromised. Turns out the full story is worse: While no customer data was accessed during the August 2022 incident, some source code and technical information were stolen from our development environment and used to target another employee, obtaining credentials and keys which […]

Cyber News, Cyber Threat Trends
  • by
  • December 27, 2022

PrivateLoader PPI Service Found Distributing Info-Stealing RisePro Malware

The pay-per-install (PPI) malware downloader service known as PrivateLoader is being used to distribute a previously documented information-stealing malware dubbed RisePro. Flashpoint spotted the newly identified stealer on December 13, 2022, after it discovered “several sets of logs” exfiltrated using the malware on an illicit cybercrime marketplace called Russian Market. A C++-based malware,

Cyber News, Cyber Threat Trends
  • by
  • December 27, 2022

2022 Top Five Immediate Threats in Geopolitical Context

As we are nearing the end of 2022, looking at the most concerning threats of this turbulent year in terms of testing numbers offers a threat-based perspective on what triggers cybersecurity teams to check how vulnerable they are to specific threats. These are the threats that were most tested to validate resilience with the Cymulate security […]

Cyber News, Cyber Threat Trends
  • by
  • December 27, 2022

GuLoader Malware Utilizing New Techniques to Evade Security Software

Cybersecurity researchers have exposed a wide variety of techniques adopted by an advanced malware downloader called GuLoader to evade security software. “New shellcode anti-analysis technique attempts to thwart researchers and hostile environments by scanning entire process memory for any virtual machine (VM)-related strings,” CrowdStrike researchers Sarang Sonawane and Donato Onofri said in a

Cyber News, Cyber Threat Trends

Cybersecurity Learning Path and Azure

There are a number of learning paths available for individuals interested in developing their cybersecurity skills using Azure.

Cyber News, Cyber Threat Trends

Manage logins for your team using these password managers

Jack Wallen says these five password managers stand out as must-try in a very crowded field of players. The post Manage logins for your team using these password managers appeared first on TechRepublic.

Cyber News, Cyber Threat Trends
  • by
  • December 24, 2022

W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names

Threat actors have published yet another round of malicious packages to Python Package Index (PyPI) with the goal of delivering information-stealing malware on compromised developer machines. Interestingly, while the malware goes by a variety of names like ANGEL Stealer, Celestial Stealer, Fade Stealer, Leaf $tealer, PURE Stealer, Satan Stealer, and @skid Stealer, cybersecurity company Phylum

Cyber News, Cyber Threat Trends

Manage logins for your team using these password managers

Jack Wallen says these five password managers stand out as must-try in a very crowded field of players. The post Manage logins for your team using these password managers appeared first on TechRepublic.

Cyber News, Cyber Threat Trends

Manage logins for your team using these password managers

Jack Wallen says these five password managers stand out as must-try in a very crowded field of players. The post Manage logins for your team using these password managers appeared first on TechRepublic.

Cyber News, Cyber Threat Trends