Cyber Defense Advisors

Year: 2023

  • by
  • November 17, 2023

Dangerous Apache ActiveMQ Exploit Allows Stealthy EDR Bypass

There’s no time to waste: For organizations on the fence about patching the critical bug in ActiveMQ, the new proof-of-concept exploit should push them towards action.

Cyber News, Cyber Threat Trends
  • by
  • November 17, 2023

CrowdStrike’s new Falcon Go delivers AI security to SMBs

Cybersecurity provider CrowdStrike has released a version of its Falcon platform, called Falcon Go, that’s aimed at small and medium size (SMB) businesses and designed to provide a one-stop, frictionless security product that lets AI do the work instead of IT staff. Falcon Go is designed to act as endpoint protection that’s easy to deploy, […]

Cyber News, Cyber Threat Trends
  • by
  • November 16, 2023

Alleged Extortioner of Psychotherapy Patients Faces Trial

Prosecutors in Finland this week commenced their criminal trial against Julius Kivimäki, a 26-year-old Finnish man charged with extorting a once popular and now-bankrupt online psychotherapy practice and thousands of its patients. In a 2,200-page report, Finnish authorities laid out how they connected the extortion spree to Kivimäki, a notorious hacker who was convicted in […]

Cyber News

FTC’s Voice Cloning Challenge

The Federal Trade Commission is running a competition “to foster breakthrough ideas on preventing, monitoring, and evaluating malicious voice cloning.”

Cyber News, Cyber Threat Trends

FTC’s Voice Cloning Challenge

The Federal Trade Commission is running a competition “to foster breakthrough ideas on preventing, monitoring, and evaluating malicious voice cloning.”  

Cyber News

Biden Admin Issues Sweeping New AI & Cybersecurity Regulations

Biden Issues Sweeping New AI & Cybersecurity Regulations Tech Enters Its ‘Obamacare’ Phase with the Advent of ‘Obamacode’ Obama’s back and Judgment Day’s here. In a significant policy shift reminiscent of the healthcare reform under Obamacare, the Biden Administration has announced a comprehensive new set of regulations addressing the rapidly evolving field of artificial intelligence […]

Cyber Thoughts
  • by
  • November 16, 2023

Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker Groups

A zero-day flaw in the Zimbra Collaboration email software was exploited by four different groups in real-world attacks to pilfer email data, user credentials, and authentication tokens. “Most of this activity occurred after the initial fix became public on GitHub,” Google Threat Analysis Group (TAG) said in a report shared with The Hacker News. The […]

Cyber News
  • by
  • November 16, 2023

Experts Uncover DarkCasino: New Emerging APT Threat Exploiting WinRAR Flaw

A hacking group that leveraged a recently disclosed security flaw in the WinRAR software as a zero-day has now been categorized as an entirely new advanced persistent threat (APT). Cybersecurity company NSFOCUS has described DarkCasino as an “economically motivated” actor that first came to light in 2021. “DarkCasino is an APT threat actor with strong […]

Cyber News

Leaving Authentication Credentials in Public Code

Interesting article about a surprisingly common vulnerability: programmers leaving authentication credentials and other secrets in publicly accessible software code: Researchers from security firm GitGuardian this week reported finding almost 4,000 unique secrets stashed inside a total of 450,000 projects submitted to PyPI, the official code repository for the Python programming language. Nearly 3,000 projects contained […]

Cyber News