Cyber Defense Advisors

Year: 2023

  • by
  • October 31, 2023

Malicious NuGet Packages Caught Distributing SeroXen RAT Malware

Cybersecurity researchers have uncovered a new set of malicious packages published to the NuGet package manager using a lesser-known method for malware deployment. Software supply chain security firm ReversingLabs described the campaign as coordinated and ongoing since August 1, 2023, while linking it to a host of rogue NuGet packages that were observed delivering a remote access […]

Cyber News, Cyber Threat Trends
  • by
  • October 31, 2023

Cybersecurity workforce shortage reaches 4 million despite significant recruitment drive

The cybersecurity workforce shortage has risen to a record high of just under 4 million despite the cybersecurity workforce growing by almost 10% in the last year. That’s according to the latest Cybersecurity Workforce Study from ISC2, the nonprofit member organization for cybersecurity professionals. The gap between the number of workers needed and the number […]

Cyber News, Cyber Threat Trends
  • by
  • October 31, 2023

SEC sues SolarWinds and its CISO for fraudulent cybersecurity disclosures

The Security and Exchange Commission (SEC) has filed charges against SolarWinds and its chief information security officer, Timothy G. Brown for misleading investors by not disclosing “known risks” and not accurately representing the company’s cybersecurity measures during and before the 2020 Sunburst cyberattack that affected thousands of customers in government agencies and companies globally. “SolarWinds […]

Cyber News, Cyber Threat Trends
  • by
  • October 31, 2023

20 Years Later, Is Patch Tuesday Enough?

Microsoft’s longstanding practice isn’t enough to handle its vulnerability problem.

Cyber News, Cyber Threat Trends

.US Harbors Prolific Malicious Link Shortening Service

The top-level domain for the United States — .US — is home to thousands of newly-registered domains tied to a malicious link shortening service that facilitates malware and phishing scams, new research suggests. The findings come close on the heels of a report that identified .US domains as among the most prevalent in phishing attacks […]

Cyber News

White House Executive Order on AI Provides Guidelines for AI Privacy and Safety

The Biden administration directed government organizations, including NIST, to encourage responsible and innovative use of AI.

Cyber News, Cyber Threat Trends
  • by
  • October 31, 2023

Boeing Breached by Ransomware, LockBit Gang Claims

LockBit gives Boeing a Nov. 2 deadline to pay the ransom or have its sensitive documents leaked to the public, but it hasn’t given evidence of the compromise.

Cyber News, Cyber Threat Trends
  • by
  • October 31, 2023

Biden’s Artificial Intelligence Executive Order Covers Broad Concerns

The executive order is ambitious and seeks to protect a variety of different groups that are most at risk from the irresponsible use of AI.

Cyber News, Cyber Threat Trends
  • by
  • October 31, 2023

Budget Cuts at CISA Could Affect Enterprise Cybersecurity

Politicians are suggesting massive cuts to CISA’s budget, threatening its missions to secure federal networks and help critical infrastructure operators fend off cyberattacks.

Cyber News, Cyber Threat Trends