Cyber Defense Advisors

Year: 2023

  • by
  • October 11, 2023

U.S. Cybersecurity Agency Warns of Actively Exploited Adobe Acrobat Reader Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a high-severity flaw in Adobe Acrobat Reader to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Tracked as CVE-2023-21608 (CVSS score: 7.8), the vulnerability has been described as a use-after-free bug that can be exploited to achieve remote code execution (RCE) with the

Cyber News, Cyber Threat Trends
  • by
  • October 11, 2023

Over 17,000 WordPress Sites Compromised by Balada Injector in September 2023

More than 17,000 WordPress websites have been compromised in the month of September 2023 with malware known as Balada Injector, nearly twice the number of detections in August. Of these, 9,000 of the websites are said to have been infiltrated using a recently disclosed security flaw in the tagDiv Composer plugin (CVE-2023-3169, CVSS score: 6.1) that […]

Cyber News, Cyber Threat Trends
  • by
  • October 11, 2023

Microsoft, American Express most spoofed brands in financial services phishing emails

Technology giant Microsoft and multinational banking firm American Express are the most spoofed companies in phishing emails targeting financial services. That’s according to the 2023 Financial Services Sector Threat Landscape report by Trustwave SpiderLabs, which examines a multitude of threats faced by the financial services industry. The report cited phishing and email-borne malware as the […]

Cyber News, Cyber Threat Trends
  • by
  • October 11, 2023

Israel-Hamas conflict extends to cyberspace

Amid the ongoing conflict between Israel and Palestine, a new battleground has opened up in cyberspace, with hackers from both sides trying to attack each other’s infrastructure, while also dragging supporters of each other into the conflict. “Analysts have noted public instances of DDoS attacks, website defacements, and increased dark web discussions from various threat […]

Cyber News, Cyber Threat Trends

Securing the future of Industry 4.0: WALLIX white paper reveals key strategies – get your copy today!

Graham Cluley Security News is sponsored this week by the folks at WALLIX. Thanks to the great team there for their support! In the rapidly evolving landscape of Industry 4.0, marked by rapid innovation and unparalleled connectivity, safeguarding your critical assets is non-negotiable. As industries like Manufacturing, Utilities, Energy, and Transportation undergo profound digital transformations, […]

Cyber News, Cyber Threat Trends

Securing the future of Industry 4.0: WALLIX white paper reveals key strategies – get your copy today!

Graham Cluley Security News is sponsored this week by the folks at WALLIX. Thanks to the great team there for their support! In the rapidly evolving landscape of Industry 4.0, marked by rapid innovation and unparalleled connectivity, safeguarding your critical assets is non-negotiable. As industries like Manufacturing, Utilities, Energy, and Transportation undergo profound digital transformations, […]

Cyber News, Cyber Threat Trends

Securing the future of Industry 4.0: WALLIX white paper reveals key strategies – get your copy today!

Graham Cluley Security News is sponsored this week by the folks at WALLIX. Thanks to the great team there for their support! In the rapidly evolving landscape of Industry 4.0, marked by rapid innovation and unparalleled connectivity, safeguarding your critical assets is non-negotiable. As industries like Manufacturing, Utilities, Energy, and Transportation undergo profound digital transformations, […]

Cyber News, Cyber Threat Trends

Cisco Can’t Stop Using Hard-Coded Passwords

There’s a new Cisco vulnerability in its Emergency Responder product: This vulnerability is due to the presence of static user credentials for the root account that are typically reserved for use during development. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow […]

Cyber News, Cyber Threat Trends
  • by
  • October 11, 2023

A Frontline Report of Chinese Threat Actor Tactics and Techniques

Threat intel experts see a reduced focus on desktop malware as threat groups prioritize passwords and tokens that let them access the same systems as remote workers.

Cyber News, Cyber Threat Trends