Executive summary: SocGholish, also known as FakeUpdate, is a JavaScript framework leveraged in social engineering drive by compromises that has been a thorn in cybersecurity professionals’ and organizations’ sides for at least 5 years now. Upon visiting a compromised website, users are redirected to a page for a browser update and a zip archive file […]
Cyber News, Cyber Threat TrendsBlack Axe syndicate responsible for multimillion-dollar losses
Cyber News, Cyber Threat TrendsThe role of the CISO has evolved, and so have the responsibilities. Some believe a CISO must have technical knowledge and experience as a cybersecurity professional, others think leadership skills such as being able to communicate with boards are what matters most. Ultimately, the hiring organisations will define what it needs in terms of cybersecurity […]
Cyber News, Cyber Threat TrendsLocal government’s travails highlight devastating impact of breaches
Cyber News, Cyber Threat TrendsUnderground organization said to have laundered €300m annually
Cyber News, Cyber Threat Trends
The International Criminal Police Organization, also called the Interpol, has announced the arrests of 75 individuals as part of a coordinated global operation against an organized cybercrime syndicate called Black Axe. “‘Black Axe’ and other West African organized crime groups have developed transnational networks, defrauding victims of millions while channeling their profits into lavish
Cyber News, Cyber Threat TrendsNo one likes the feeling that someone is looking over their shoulder when they work, shop or surf online. But this is just what crooks and scammers do without our knowledge using “spyware.” Spyware is a piece of software that can covertly gather information on you. It can track the websites you visit and even […]
Cyber News, Cyber Threat Trends
User-Specific Secrets on AWS: IAM Policies ACM.82 IAM Policies to allow users to describe their own secrets This is a continuation of my series of posts on Automating Cybersecurity Metrics. In the last post, we created an SSH key for a user programatically. I created a policy for our Developer Group Role using the ${aws:username} parameter which […]
Cyber News, Cyber Threat TrendsEven as ransomware continues to be at the forefront of global news and company after company reports attacks, many still […]
Cyber News, Cyber Threat Trends