Cyber Defense Advisors

Year: 2023

Simplify Your Sox Compliance

Simplify Your Sox Compliance Navigating the maze of Sarbanes-Oxley (SOX) compliance can be daunting for businesses of all sizes. From financial reporting to managing internal controls, SOX introduces a host of challenges and obligations. Yet, compliance doesn’t have to be a convoluted affair. Here are some pragmatic ways to streamline your SOX journey and ensure […]

SOX Compliance
  • by
  • December 5, 2023

15,000 Go Module Repositories on GitHub Vulnerable to Repojacking Attack

New research has found that over 15,000 Go module repositories on GitHub are vulnerable to an attack called repojacking. “More than 9,000 repositories are vulnerable to repojacking due to GitHub username changes,” Jacob Baines, chief technology officer at VulnCheck, said in a report shared with The Hacker News. “More than 6,000 repositories were vulnerable to […]

Cyber News
  • by
  • December 5, 2023

Russian hacker pleads guilty to Trickbot malware conspiracy

Graham CLULEY December 05, 2023 Promo Protect all your devices, without slowing them down. Free 30-day trial A 40-year-old Russian man faces a lengthy prison sentence in the United States after pleading guilty to his involvement in the distribution and development of the notorious Trickbot malware. The US Department of Justice announced that Vladimir Dunaev, […]

Cyber News
  • by
  • December 5, 2023

New Threat Actor ‘AeroBlade’ Emerges in Espionage Attack on U.S. Aerospace

A previously undocumented threat actor has been linked to a cyber attack targeting an aerospace organization in the U.S. as part of what’s suspected to be a cyber espionage mission. The BlackBerry Threat Research and Intelligence team is tracking the activity cluster as AeroBlade. Its origin is currently unknown and it’s not clear if the […]

Cyber News
  • by
  • December 5, 2023

Microsoft Warns of Kremlin-Backed APT28 Exploiting Critical Outlook Vulnerability

Microsoft on Monday said it detected Kremlin-backed nation-state activity exploiting a now-patched critical security flaw in its Outlook email service to gain unauthorized access to victims’ accounts within Exchange servers. The tech giant attributed the intrusions to a threat actor it called Forest Blizzard (formerly Strontium), which is also widely tracked under the monikers APT28, […]

Cyber News

How Incident Response Testing Can Help Keep Your Company Secure

How Incident Response Testing Can Help Keep Your Company Secure It’s no secret: cybersecurity threats are everywhere. From sophisticated ransomware attacks to phishing campaigns, the digital landscape is fraught with potential pitfalls. But imagine, for a moment, that your company is a well-fortified castle. A strong wall and armed guards can protect it, but unless […]

Incident Response Testing

Frequently Asked Questions About Web Application Testing

Frequently Asked Questions About Web Application Testing When diving into the realm of web application development, one area that can seem both mysterious and essential is testing. Whether you’re a novice developer or someone just curious about the process, understanding web application testing is crucial. Below, we delve into the most frequently asked questions about […]

Web Application Testing
  • by
  • December 4, 2023

Supply-chain ransomware attack causes outages at over 60 credit unions

Over sixty credit unions across the United States have been taken offline following a ransomware attack at one of their technology providers – demonstrating once again the damage that can be caused by a supply-chain attack. There are a few moving parts here, so here’s a quick summary: Trellance – A provider of solutions and […]

Cyber News

Simplify Your SEC Compliance

Simplify Your SEC Compliance The U.S. Securities and Exchange Commission (SEC) plays a vital role in ensuring transparency, integrity, and accountability in the country’s securities markets. For businesses, this means navigating a complex web of regulations and requirements. Yet, despite the intricacies, achieving and maintaining SEC compliance need not be an insurmountable task. By adopting […]

SEC Compliance