Cyber Defense Advisors

Year: 2023

Friday Squid Blogging: Protecting Cephalopods in Medical Research

From Nature: Cephalopods such as octopuses and squid could soon receive the same legal protection as mice and monkeys do when they are used in research. On 7 September, the US National Institutes of Health (NIH) asked for feedback on proposed guidelines that, for the first time in the United States, would require research projects […]

Cyber News, Cyber Threat Trends
  • by
  • September 30, 2023

Updated Startup Script for Disabling Unnecessary Services on a Mac

Hunting down more things to disable on a Mac Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • September 30, 2023

Parsing and Validating Lambda Parameters and Environment Variables

ACM.266 Creating a Safe String Function and Validation File Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • September 30, 2023

New Critical Security Flaws Expose Exim Mail Servers to Remote Attacks

Multiple security vulnerabilities have been disclosed in the Exim mail transfer agent that, if successfully exploited, could result in information disclosure and remote code execution. The list of flaws, which were reported anonymously way back in June 2022, is as follows – CVE-2023-42114 (CVSS score: 3.7) – Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability

Cyber News, Cyber Threat Trends
  • by
  • September 30, 2023

Iranian APT Group OilRig Using New Menorah Malware for Covert Operations

Sophisticated cyber actors backed by Iran known as OilRig have been linked to a spear-phishing campaign that infects victims with a new strain of malware called Menorah. “The malware was designed for cyberespionage, capable of identifying the machine, reading and uploading files from the machine, and downloading another file or malware,” Trend Micro researchers Mohamed Fahmy and […]

Cyber News, Cyber Threat Trends
  • by
  • September 30, 2023

FBI Warns of Rising Trend of Dual Ransomware Attacks Targeting U.S. Companies

The U.S. Federal Bureau of Investigation (FBI) is warning of a new trend of dual ransomware attacks targeting the same victims, at least since July 2023. “During these attacks, cyber threat actors deployed two different ransomware variants against victim companies from the following variants: AvosLocker, Diamond, Hive, Karakurt, LockBit, Quantum, and Royal,” the FBI said in an […]

Cyber News, Cyber Threat Trends

Safe Cyber: The Benefits of a High-Level Risk Assessment

Safe Cyber: The Benefits of a High-Level Risk Assessment As our world becomes increasingly interconnected, the digital realm emerges as both a source of boundless opportunity and a potential minefield of cyber threats. From personal data breaches to severe disruptions of organizational operations, cyber threats underscore the need for robust cyber defense mechanisms. At the […]

High-Level Risk Assessment

Cybersecurity Safety: What Is a High-Level Risk Assessment?

Cybersecurity Safety: What Is a High-Level Risk Assessment? In an era where the digital landscape is continually evolving, the significance of cybersecurity cannot be overstated. As technology infiltrates every facet of our lives, the need for robust defense mechanisms against cyber threats is paramount. In this light, one term that frequently emerges is ‘High-Level Risk […]

High-Level Risk Assessment

A How-To Guide for a Cyber Security High-Level Risk Assessment

A How-To Guide for a Cyber Security High-Level Risk Assessment In the digitized age where data is the currency, ensuring the security of this valuable asset is paramount. Organizations of all sizes are increasingly aware of the implications of data breaches, prompting a focus on cyber security. One of the essential steps in maintaining robust […]

High-Level Risk Assessment