Cyber Defense Advisors

Cyber Threat Trends

  • by
  • October 30, 2023

New malware campaign uses MSIX packages to infect Windows PCs

A new cyberattack campaign has been found to be using MSIX — a Windows application packaging format — to infect Windows PCs and evade detection by dropping a stealthy malware loader into its victim’s PC. Developers commonly use MSIX to package, distribute, and install their applications to Windows users, and is now being used for […]

Cyber News, Cyber Threat Trends
  • by
  • October 30, 2023

What the Boardroom Is Missing: CISOs

From communicating why security should be a priority to advocating for accountability and greater focus on protecting data in the cloud, CISOs can make the case for keeping people and sensitive data secure.

Cyber News, Cyber Threat Trends

Friday Squid Blogging: On the Ugliness of Squid Fishing

And seafood in general: A squid ship is a bustling, bright, messy place. The scene on deck looks like a mechanic’s garage where an oil change has gone terribly wrong. Scores of fishing lines extend into the water, each bearing specialized hooks operated by automated reels. When they pull a squid on board, it squirts […]

Cyber News, Cyber Threat Trends
  • by
  • October 29, 2023

Researchers Uncover Wiretapping of XMPP-Based Instant Messaging Service

New findings have shed light on what’s said to be a lawful attempt to covertly intercept traffic originating from jabber[.]ru (aka xmpp[.]ru), an XMPP-based instant messaging service, via servers hosted on Hetzner and Linode (a subsidiary of Akamai) in Germany. “The attacker has issued several new TLS certificates using Let’s Encrypt service which were used to […]

Cyber News, Cyber Threat Trends
  • by
  • October 29, 2023

10 Tips for Security Awareness Training That Hits the Target

Try these tricks for devising an education program that gets employees invested — and stays with them after the training is over.

Cyber News, Cyber Threat Trends
  • by
  • October 29, 2023

Why I’m Not Using Lambda Step Functions (Yet)

ACM.355 A summary of prior posts on feature requests for AWS Step Functions Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • October 29, 2023

Azure and Microsoft Data Breaches

What’s causing breaches on Azure and Microsoft cloud? Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • October 29, 2023

AWS S3 Bucket Keys to Reduce KMS costs

ACM.356 Reducing KMS Costs for KMS Keys Used With S3 Buckets Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends

Friday Squid Blogging: On the Ugliness of Squid Fishing

And seafood in general: A squid ship is a bustling, bright, messy place. The scene on deck looks like a mechanic’s garage where an oil change has gone terribly wrong. Scores of fishing lines extend into the water, each bearing specialized hooks operated by automated reels. When they pull a squid on board, it squirts […]

Cyber News, Cyber Threat Trends