Cyber Defense Advisors

Month: March 2024

  • by
  • March 21, 2024

Making Sense of Operational Technology Attacks: The Past, Present, and Future

When you read reports about cyber-attacks affecting operational technology (OT), it’s easy to get caught up in the hype and assume every single one is sophisticated. But are OT environments all over the world really besieged by a constant barrage of complex cyber-attacks? Answering that would require breaking down the different types of OT cyber-attacks […]

Cyber News
  • by
  • March 21, 2024

U.S. Sanctions Russians Behind ‘Doppelganger’ Cyber Influence Campaign

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) on Wednesday announced sanctions against two 46-year-old Russian nationals and the respective companies they own for engaging in cyber influence operations. Ilya Andreevich Gambashidze (Gambashidze), the founder of the Moscow-based company Social Design Agency (SDA), and Nikolai Aleksandrovich Tupikin (Tupikin), the CEO and current owner […]

Cyber News
  • by
  • March 21, 2024

Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability

Ivanti has disclosed details of a critical remote code execution flaw impacting Standalone Sentry, urging customers to apply the fixes immediately to stay protected against potential cyber threats. Tracked as CVE-2023-41724, the vulnerability carries a CVSS score of 9.6. “An unauthenticated threat actor can execute arbitrary commands on the underlying operating system of the appliance […]

Cyber News
  • by
  • March 21, 2024

Atlassian Releases Fixes for Over 2 Dozen Flaws, Including Critical Bamboo Bug

Atlassian has released patches for more than two dozen security flaws, including a critical bug impacting Bamboo Data Center and Server that could be exploited without requiring user interaction. Tracked as CVE-2024-1597, the vulnerability carries a CVSS score of 10.0, indicating maximum severity. Described as an SQL injection flaw, it’s rooted in a dependency called […]

Cyber News
  • by
  • March 21, 2024

The Not-so-True People-Search Network from China

It’s not unusual for the data brokers behind people-search websites to use pseudonyms in their day-to-day lives (you would, too). Some of these personal data purveyors even try to reinvent their online identities in a bid to hide their conflicts of interest. But it’s not every day you run across a US-focused people-search network based […]

Cyber News
  • by
  • March 21, 2024

Smashing Security podcast #364: Bing pop-up wars, and the British Library ransomware scandal

There’s a Bing ding dong, after Microsoft (over?) enthusiastically encourages Chrome users to stop using Google, and silence hits the British Library as it shares its story of a ransomware attack. All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Plus: […]

Cyber News
  • by
  • March 20, 2024

Fraudsters are posing as the FTC to scam consumers

The United States Federal Trade Commission (FTC) has warned the public to be cautious if contacted by people claiming to be… FTC staff. In a warning published on its website, the FTC said that scammers were using its employees’ real names to steal money from consumers. A typical ruse will see the bogus FTC staffer […]

Cyber News
  • by
  • March 20, 2024

New ‘Loop DoS’ Attack Impacts Hundreds of Thousands of Systems

A novel denial-of-service (DoS) attack vector has been found to target application-layer protocols based on User Datagram Protocol (UDP), putting hundreds of thousands of hosts likely at risk. Called Loop DoS attacks, the approach pairs “servers of these protocols in such a way that they communicate with each other indefinitely,” researchers from the CISPA Helmholtz-Center […]

Cyber News
  • by
  • March 20, 2024

Gotta Hack ‘Em All: Pokémon passwords reset after attack

Graham CLULEY March 20, 2024 Promo Protect all your devices, without slowing them down. Free 30-day trial Are you using the same passwords in multiple places online? Well, stop.  Stop right now.  And make sure that you’ve told your friends and family to stop being reckless too. Because if you use the same login credentials […]

Cyber News