Cyber Defense Advisors

Month: August 2023

AI-Powered CryptoRom Scam Targets Mobile Users

Sophos security researchers shared the findings in a report published today

Cyber News, Cyber Threat Trends

AI-Powered CryptoRom Scam Targets Mobile Users

Sophos security researchers shared the findings in a report published today

Cyber News, Cyber Threat Trends

Threat Actors Use AWS SSM Agent as a Remote Access Trojan

Mitiga’s research demonstrated two potential attack scenarios

Cyber News, Cyber Threat Trends

Threat Actors Use AWS SSM Agent as a Remote Access Trojan

Mitiga’s research demonstrated two potential attack scenarios

Cyber News, Cyber Threat Trends
  • by
  • August 2, 2023

Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access Trojan

Cybersecurity researchers have discovered a new post-exploitation technique in Amazon Web Services (AWS) that allows the AWS Systems Manager Agent (SSM Agent) to be run as a remote access trojan on Windows and Linux environments “The SSM agent, a legitimate tool used by admins to manage their instances, can be re-purposed by an attacker who […]

Cyber News, Cyber Threat Trends
  • by
  • August 2, 2023

Top Industries Significantly Impacted by Illicit Telegram Networks

In recent years the rise of illicit activities conducted within online messaging platforms has become a growing concern for countless industries. One of the most notable platforms that has been host to many malicious actors and nefarious activities has been Telegram. Thanks to its accessibility, popularity, and user anonymity, Telegram has attracted a large number […]

Cyber News, Cyber Threat Trends
  • by
  • August 2, 2023

Unified XDR and SIEM Alleviate Security Alert Fatigue

By integrating detection response with information and event management, organizations can move beyond protective controls and harden their defenses.

Cyber News, Cyber Threat Trends
  • by
  • August 2, 2023

Industrial Control Systems Vulnerabilities Soar: Over One-Third Unpatched in 2023

About 34% of security vulnerabilities impacting industrial control systems (ICSs) that were reported in the first half of 2023 have no patch or remediation, registering a significant increase from 13% the previous year. According to data compiled by SynSaber, a total of 670 ICS product flaws were reported via the U.S. Cybersecurity and Infrastructure Security […]

Cyber News, Cyber Threat Trends
  • by
  • August 2, 2023

Phishers Exploit Salesforce’s Email Services Zero-Day in Targeted Facebook Campaign

A sophisticated Facebook phishing campaign has been observed exploiting a zero-day flaw in Salesforce’s email services, allowing threat actors to craft targeted phishing messages using the company’s domain and infrastructure. “Those phishing campaigns cleverly evade conventional detection methods by chaining the Salesforce vulnerability and legacy quirks in Facebook’s Web Games platform,”

Cyber News, Cyber Threat Trends