Cyber Defense Advisors

News

  • by
  • October 19, 2022

CISA Warns of Critical Flaws Affecting Industrial Appliances from Advantech and Hitachi

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday released two Industrial Control Systems (ICS) advisories pertaining to severe flaws in Advantech R-SeeNet and Hitachi Energy APM Edge appliances. This consists of three weaknesses in the R-SeeNet monitoring solution, successful exploitation of which “could result in an unauthorized attacker remotely deleting files on the

Cyber News, Cyber Threat Trends

Deadbolt Ransomware Extorts Vendors and Customers

New report provides in-depth look at novel NAS-based threat

Cyber News, Cyber Threat Trends

Toyota Data Breach Exposes Customer Data – What You Can Do to Protect Yourself

Automobile manufacturer Toyota recently announced a data breach that may have exposed the emails of up to 300,000 customers for a period of nearly five years.  Toyota says the breach is the result of a subcontractor posting source code for Toyota’s “T-Connect” app on the software development platform GitHub in December 2017. This code included […]

Cyber News, Cyber Threat Trends
  • by
  • October 19, 2022

How Card Skimming Disproportionally Affects Those Most In Need

When people banking in the United States lose money because their payment card got skimmed at an ATM, gas pump or grocery store checkout terminal, they may face hassles or delays in recovering any lost funds, but they are almost always made whole by their financial institution. Yet, one class of Americans — those receiving […]

Cyber News, Cyber Threat Trends

Qatar Spyware

Everyone visiting Qatar for the World Cup needs to install spyware on their phone. Everyone travelling to Qatar during the football World Cup will be asked to download two apps called Ehteraz and Hayya. Briefly, Ehteraz is an covid-19 tracking app, while Hayya is an official World Cup app used to keep track of match […]

Cyber News, Cyber Threat Trends
  • by
  • October 19, 2022

GitGuardian adds IaC scanning to code security platform to protect SDLC

GitGuardian has added infrastructure-as-code (IaC) scanning to its code security platform to enhance the security of software development. The firm said the new feature will help security and development teams write, maintain, and run secure code, protecting the software development lifecycle (SDLC) against risks like tampering, code leakage and hardcoded credentials. The release reflects a […]

Cyber News, Cyber Threat Trends
  • by
  • October 19, 2022

Сryptocurrency and Ransomware — The Ultimate Friendship

Both cryptocurrency and ransomware are nothing new in the digital world; both have been there for a very long time, which was enough for them to find common pieces for starting their relationship. Ransomware can be like a virtual car that works on all types of fuels, and crypto is the one that is currently […]

Cyber News, Cyber Threat Trends
  • by
  • October 19, 2022

User-Specific Secrets on AWS: KMS

ACM.84 Granting an IAM Group permission to use a KMS key in a Key Policy This is a continuation of my series of posts on Automating Cybersecurity Metrics. We’ve been working on adding a user-specific secret in Secrets Manager in the past few posts and considered how to deploy secrets in a manner that supports non-repudiation. […]

Cyber News, Cyber Threat Trends

Spyder Loader Malware Deployed Against Hong Kong Organizations

The attackers reportedly remained active on some networks for more than a year

Cyber News, Cyber Threat Trends