Cyber Defense Advisors

Year: 2023

  • by
  • November 18, 2023

Ransomware gang files SEC complaint against company that refused to negotiate

The BlackCat ransomware gang has begun abusing upcoming US Securities and Exchange Commission (SEC) cyber incident reporting rules to put pressure on organizations that refuse to negotiate ransom payments. The attackers filed an SEC complaint against one victim already, in a move that’s likely to become a common practice once the new regulations go into […]

Cyber News, Cyber Threat Trends
  • by
  • November 18, 2023

Repository Accounts and Administrators

ACM.390 Thinking about software development environments, permissions, complexity, and naming conventions Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends

Friday Squid Blogging: Unpatched Vulnerabilities in the Squid Caching Proxy

In a rare squid/security post, here’s an article about unpatched vulnerabilities in the Squid caching proxy. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here.

Cyber News, Cyber Threat Trends
  • by
  • November 18, 2023

8Base Group Deploying New Phobos Ransomware Variant via SmokeLoader

The threat actors behind the 8Base ransomware are leveraging a variant of the Phobos ransomware to conduct their financially motivated attacks. The findings come from Cisco Talos, which has recorded an increase in activity carried out by the cybercriminals. “Most of the group’s Phobos variants are distributed by SmokeLoader, a backdoor trojan,” security researcher Guilherme […]

Cyber News
  • by
  • November 18, 2023

Russian Cyber Espionage Group Deploys LitterDrifter USB Worm in Targeted Attacks

Russian cyber espionage actors affiliated with the Federal Security Service (FSB) have been observed using a USB propagating worm called LitterDrifter in attacks targeting Ukrainian entities. Check Point, which detailed Gamaredon’s (aka Aqua Blizzard, Iron Tilden, Primitive Bear, Shuckworm, and Winterflounder) latest tactics, branded the group as engaging in large-scale campaigns that are followed by […]

Cyber News

How CMMC Compliance Can Help Keep Your Company Secure

How CMMC Compliance Can Help Keep Your Company Secure In today’s ever-evolving digital landscape, cybersecurity is not just an optional add-on but an imperative component of a company’s operation. As cyber threats become more sophisticated, the need for stringent cybersecurity measures cannot be overstressed. This brings us to the Cybersecurity Maturity Model Certification (CMMC), a […]

CMMC Compliance

Friday Squid Blogging: Unpatched Vulnerabilities in the Squid Caching Proxy

In a rare squid/security post, here’s an article about unpatched vulnerabilities in the Squid caching proxy. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here.

Cyber News, Cyber Threat Trends

Friday Squid Blogging: Unpatched Vulnerabilities in the Squid Caching Proxy

In a rare squid/security post, here’s an article about unpatched vulnerabilities in the Squid caching proxy. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here. Tags: computer security, patching, proxies, squid, vulnerabilities, web Sidebar photo of […]

Cyber News

Ransomware Gang Files SEC Complaint

A ransomware gang, annoyed at not being paid, filed an SEC complaint against its victim for not disclosing its security breach within the required four days. This is over the top, but is just another example of the extreme pressure ransomware gangs put on companies after seizing their data. Gangs are now going through the […]

Cyber News, Cyber Threat Trends