Cyber Defense Advisors

Month: January 2024

ERP/WMS Redeployment for a Decentralized Supply Chain

ERP/WMS Redeployment for a Decentralized Supply Chain In an ever-evolving world of commerce and logistics, businesses are constantly seeking ways to optimize their supply chain management. The shift towards a decentralized supply chain has gained momentum, driven by the need for increased flexibility, agility, and resilience. This transformation necessitates a reevaluation of existing Enterprise Resource […]

ERP/WMS Redeployment

Dissecting the Complex Landscape of SEC Compliance in Cryptomarkets

Dissecting the Complex Landscape of SEC Compliance in Cryptomarkets The world of cryptocurrencies has experienced a meteoric rise in popularity and adoption over the past decade. Bitcoin, the first cryptocurrency, was created in 2009, and since then, thousands of other digital assets have emerged, each with its unique use cases and features. With this rapid […]

SEC Compliance
  • by
  • January 14, 2024

New Findings Challenge Attribution in Denmark’s Energy Sector Cyberattacks

The cyber attacks targeting the energy sector in Denmark last year may not have had the involvement of the Russia-linked Sandworm hacking group, new findings from Forescout show. The intrusions, which targeted around 22 Danish energy organizations in May 2023, occurred in two distinct waves, one which exploited a security flaw in Zyxel firewall (CVE-2023-28771) […]

Cyber News
  • by
  • January 13, 2024

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

Juniper Networks has released updates to fix a critical remote code execution (RCE) vulnerability in its SRX Series firewalls and EX Series switches. The issue, tracked as CVE-2024-21591, is rated 9.8 on the CVSS scoring system. “An out-of-bounds write vulnerability in J-Web of Juniper Networks Junos OS SRX Series and EX Series allows an unauthenticated, […]

Cyber News
  • by
  • January 13, 2024

29-Year-Old Ukrainian Cryptojacking Kingpin Arrested for Exploiting Cloud Services

A 29-year-old Ukrainian national has been arrested in connection with running a “sophisticated cryptojacking scheme,” netting them over $2 million (€1.8 million) in illicit profits. The person, described as the “mastermind” behind the operation, was apprehended in Mykolaiv, Ukraine, on January 9 by the National Police of Ukraine with support from Europol and an unnamed […]

Cyber News
  • by
  • January 12, 2024

Friday Squid Blogging: Giant Squid from Newfoundland in the 1800s

Interesting article, with photographs. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here. Tags: photos, squid Sidebar photo of Bruce Schneier by Joe MacInnis.  

Cyber News
  • by
  • January 12, 2024

Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

As many as five different malware families were deployed by suspected nation-state actors as part of post-exploitation activities leveraging two zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances since early December 2023. “These families allow the threat actors to circumvent authentication and provide backdoor access to these devices,” Mandiant said in an analysis published […]

Cyber News
  • by
  • January 12, 2024

Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion

The threat actors associated with the Medusa ransomware have ramped up their activities following the debut of a dedicated data leak site on the dark web in February 2023 to publish sensitive data of victims who are unwilling to agree to their demands. “As part of their multi-extortion strategy, this group will provide victims with […]

Cyber News
  • by
  • January 12, 2024

Applying the Tyson Principle to Cybersecurity: Why Attack Simulation is Key to Avoiding a KO

Picture a cybersecurity landscape where defenses are impenetrable, and threats are nothing more than mere disturbances deflected by a strong shield. Sadly, this image of fortitude remains a pipe dream despite its comforting nature. In the security world, preparedness is not just a luxury but a necessity. In this context, Mike Tyson’s famous adage, “Everyone […]

Cyber News