Cyber Defense Advisors

News

  • by
  • June 11, 2024

Apple Launches Private Cloud Compute for Privacy-Centric AI Processing

Apple has announced the launch of a “groundbreaking cloud intelligence system” called Private Cloud Compute (PCC) that’s designed for processing artificial intelligence (AI) tasks in a privacy-preserving manner in the cloud. The tech giant described PCC as the “most advanced security architecture ever deployed for cloud AI compute at scale.” PCC coincides with the arrival […]

Cyber News
  • by
  • June 11, 2024

China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics

Cybersecurity researchers have uncovered an updated version of malware called ValleyRAT that’s being distributed as part of a new campaign. “In the latest version, ValleyRAT introduced new commands, such as capturing screenshots, process filtering, forced shutdown, and clearing Windows event logs,” Zscaler ThreatLabz researchers Muhammed Irfan V A and Manisha Ramcharan Prajapati said. ValleyRAT was […]

Cyber News
  • by
  • June 11, 2024

Snowflake Breach Exposes 165 Customers’ Data in Ongoing Extortion Campaign

As many as 165 customers of Snowflake are said to have had their information potentially exposed as part of an ongoing campaign designed to facilitate data theft and extortion, indicating the operation has broader implications than previously thought. Google-owned Mandiant, which is assisting the cloud data warehousing platform in its incident response efforts, is tracking […]

Cyber News
  • by
  • June 11, 2024

Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers

Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild. Tracked as CVE-2024-4610, the use-after-free issue impacts the following products – Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) Valhall GPU Kernel Driver (all versions from r34p0 to r40p0) “A local […]

Cyber News

Med Students Save the Day in London Hospitals Cyberattack

Med Students Save the Day in London Hospitals Cyberattack Emergency Response Highlights Need for Robust Disaster Recovery Strategies When ransomware hits, who you gonna call? Medical students, apparently. A major cyberattack by the Russian group Qilin has thrown London hospitals into disarray, disrupting critical services like blood transfusions and test results. The pathology firm Synnovis […]

Cyber Thoughts
  • by
  • June 10, 2024

More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack

Cybersecurity researchers have spotted a phishing attack distributing the More_eggs malware by masquerading it as a resume, a technique originally detected more than two years ago. The attack, which was unsuccessful, targeted an unnamed company in the industrial services industry in May 2024, Canadian cybersecurity firm eSentire disclosed last week. “Specifically, the targeted individual was […]

Cyber News
  • by
  • June 10, 2024

Cybersecurity CPEs: Unraveling the What, Why & How

Staying Sharp: Cybersecurity CPEs Explained Perhaps even more so than in other professional domains, cybersecurity professionals constantly face new threats. To ensure you stay on top of your game, many certification programs require earning Continuing Professional Education (CPE) credits. CPEs are essentially units of measurement used to quantify the time and effort professionals spend on […]

Cyber News
  • by
  • June 10, 2024

Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers

Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules, thereby allowing them to gain unauthorized access to cloud resources. “This case does highlight an inherent risk in using service tags as a single mechanism for vetting incoming network […]

Cyber News
  • by
  • June 10, 2024

Exploiting Mistyped URLs

@Levi B. “Those who are not familiar with the term “bit-squatting” should look that up” Are you sure you want to go down that rabbit hole? It’s an instant of a general class of problems that are never going to go away. And why in “Web servers would usually have error-correcting (ECC) memory, in which […]

Cyber News