Cyber Defense Advisors

News

Reshaping the Threat Landscape: Deepfake Cyberattacks Are Here

It’s time to dispel notions of deepfakes as an emergent threat. All the pieces for widespread attacks are in place and readily available to cybercriminals, even unsophisticated ones.

Cyber News

15 highest-paying certifications for 2022

Number one on Skillsoft’s 2022 list of top-paying IT certs is AWS Certified Solutions Architect Professional, with an annual salary of $168,080. The post 15 highest-paying certifications for 2022 appeared first on TechRepublic.

Cyber News

Trojanized, Signed Comm100 Chat Installer Anchors Supply Chain Attack

Malicious Comm100 files have been found scattered throughout North America, and across sectors including tech, healthcare, manufacturing, telecom, insurance, and others.

Cyber News

Enterprises embrace devsecops practices against supply chain attacks

For enterprise security professionals alarmed about the rising number of supply chain attacks, a report released this week by Google and supply chain security firm Chainguard has good news: Devsecops best practices are becoming more and more common. The recent prevalence of supply chain attacks—most notably the SolarWinds attack, which affected numerous large companies in […]

Cyber News

Microsoft Confirms Pair of Blindsiding Exchange Zero-Days, No Patch Yet

The “ProxyNotShell” security vulnerabilities can be chained for remote code execution and total takeover of corporate email platforms.

Cyber News

Prison for ex-eBay staff who aggressively cyberstalked company’s critics with Craigslist sex party ads and funeral wreaths

Two men, who previously worked at eBay, have been sentenced to prison after admitting their role in a cyberstalking campaign that targeted the editor and publisher of a newsletter that criticised the company. Read more in my article on the Hot for Security blog.

Cyber News

Microsoft: Two New 0-Day Flaws in Exchange Server

Microsoft Corp. is investigating reports that attackers are exploiting two previously unknown vulnerabilities in Exchange Server, a technology many organizations rely on to send and receive email. Microsoft says it is expediting work on software patches to plug the security holes. In the meantime, it is urging a subset of Exchange customers to enable a […]

Cyber News

Hackers Hide Malware in Windows Logo, Target Middle East Governments

The group continued to use the LookBack backdoor, but also several new types of malware

Cyber News

SolarMarker Attack Leverages Weak WordPress Sites, Fake Chrome Browser Updates

The SolarMarker group is exploiting a vulnerable WordPress-run website to encourage victims to download fake Chrome browser updates, part of a new tactic in its watering-hole attacks.

Cyber News