The NSA (together with CISA) has published a long report on supply-chain security: “Securing the Software Supply Chain: Recommended Practices Guide for Suppliers.“: Prevention is often seen as the responsibility of the software developer, as they are required to securely develop and deliver code, verify third party components, and harden the build environment. But the […]
Cyber News, Cyber Threat Trends
The Transparent Tribe threat actor has been linked to a new campaign aimed at Indian government organizations with trojanized versions of a two-factor authentication solution called Kavach. “This group abuses Google advertisements for the purpose of malvertising to distribute backdoored versions of Kavach multi-authentication (MFA) applications,” Zscaler ThreatLabz researcher Sudeep Singh said
Cyber News, Cyber Threat TrendsThe proportion of cyber-attacks perpetrated by nation states targeting critical infrastructure jumped from 20% to 40%
Cyber News, Cyber Threat Trends
ACM.101 Configuring network and host firewalls on home and business networks to allow SSH to an AWS IP address This is a continuation of my series on Automating Cybersecurity Metrics. In the last post, we deployed an EC2 instance configured with an EIP on AWS. Deploying an AWS Elastic IP Address If you’ve done that, now you […]
Cyber News, Cyber Threat TrendsUK regulator reduces penalty by 90%
Cyber News, Cyber Threat Trends
Welcome back! Previously in our Go Dox Yourself series, we walked through reviewing what information is available about you online, prioritizing those accounts that are most important or still active, and then restricting how much we share through those accounts and who gets to see it. That’s two out of our three steps — maybe good […]
Cyber News, Cyber Threat Trends
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published three Industrial Control Systems (ICS) advisories about multiple vulnerabilities in software from ETIC Telecom, Nokia, and Delta Industrial Automation. Prominent among them is a set of three flaws affecting ETIC Telecom’s Remote Access Server (RAS), which “could allow an attacker to obtain sensitive information and
Cyber News, Cyber Threat TrendsAvanan spots campaign leveraging Dynamic 365 Customer Voice
Cyber News, Cyber Threat TrendsALMA suspends astronomical observations
Cyber News, Cyber Threat Trends