Cyber Defense Advisors

Month: April 2024

  • by
  • April 2, 2024

Declassified NSA Newsletters

Through a 2010 FOIA request (yes, it took that long), we have copies of the NSA’s KRYPTOS Society Newsletter, “Tales of the Krypt,” from 1994 to 2003. There are many interesting things in the 800 pages of newsletter. There are many redactions. And a 1994 review of Applied Cryptography by redacted: Applied Cryptography, for those […]

Cyber News
  • by
  • April 2, 2024

Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution

The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed. The audacious supply chain compromise, tracked as CVE-2024-3094 (CVSS score: 10.0), came to light last week when Microsoft engineer and PostgreSQL developer Andres […]

Cyber News
  • by
  • April 2, 2024

Amazon refuses to refund me £700 for iPhone 15 it didn’t deliver

Amazon refuses to refund £700 iPhone 15 it didn’t deliver | Graham Cluley Watch this video on YouTube On Tuesday, 26 March, Amazon was supposed to have delivered an iPhone 15 and an accompanying Otterbox case to my home. Amazon said it would require a signature upon delivery. So, I naturally ensured that I was […]

Cyber News
  • by
  • April 2, 2024

Harnessing the Power of CTEM for Cloud Security

Cloud solutions are more mainstream – and therefore more exposed – than ever before. In 2023 alone, a staggering 82% of data breaches were against public, private, or hybrid cloud environments. What’s more, nearly 40% of breaches spanned multiple cloud environments. The average cost of a cloud breach was above the overall average, at $4.75 […]

Cyber News
  • by
  • April 2, 2024

China-linked Hackers Deploy New ‘UNAPIMON’ Malware for Stealthy Operations

A threat activity cluster tracked as Earth Freybug has been observed using a new malware called UNAPIMON to fly under the radar. “Earth Freybug is a cyberthreat group that has been active since at least 2012 that focuses on espionage and financially motivated activities,” Trend Micro security researcher Christopher So said in a report published […]

Cyber News
  • by
  • April 2, 2024

Google to Delete Billions of Browsing Records in ‘Incognito Mode’ Privacy Lawsuit Settlement

Google has agreed to purge billions of data records reflecting users’ browsing activities to settle a class action lawsuit that claimed the search giant tracked them without their knowledge or consent in its Chrome browser. The class action, filed in 2020, alleged the company misled users by tracking their internet browsing activity who thought that […]

Cyber News
  • by
  • April 2, 2024

Massive Phishing Campaign Strikes Latin America: Venom RAT Targeting Multiple Sectors

The threat actor known as TA558 has been attributed to a new massive phishing campaign that targets a wide range of sectors in Latin America with the goal of deploying Venom RAT. The attacks primarily singled out hotel, travel, trading, financial, manufacturing, industrial, and government verticals in Spain, Mexico, the United States, Colombia, Portugal, Brazil, […]

Cyber News
  • by
  • April 1, 2024

Magic Security Dust

Adam Shostack is selling magic security dust. It’s about time someone is commercializing this essential technology.  

Cyber News
  • by
  • April 1, 2024

Indian Government Rescues 250 Citizens Forced into Cybercrime in Cambodia

The Indian government said it has rescued and repatriated about 250 citizens in Cambodia who were held captive and coerced into running cyber scams. The Indian nationals “were lured with employment opportunities to that country but were forced to undertake illegal cyber work,” the Ministry of External Affairs (MEA) said in a statement, adding it […]

Cyber News