Cyber Defense Advisors

News

  • by
  • October 14, 2022

When What You Deleted is Not Really Deleted

ACM.79 When a process leaves sensitive data accessible to users or malware and what you can do about it. This is a continuation of my series on Automating Cybersecurity Metrics. In the last post we created some SSH credentials for a user but the credentials ended up in a files in the home directory on our […]

Cyber News, Cyber Threat Trends

Budworm Espionage Group Returns, Targets US State Legislature

Budworm leveraged the Log4j vulnerabilities to compromise the Apache Tomcat service on servers

Cyber News, Cyber Threat Trends

New Alchimist attack framework hits Windows, Linux and Mac

The attack framework of probable Chinese origin used by cybercriminals has been discovered. The post New Alchimist attack framework hits Windows, Linux and Mac appeared first on TechRepublic.

Cyber News, Cyber Threat Trends

Malicious WhatsApp Mod Spotted Infecting Android Devices

YoWhatsApp v2.22.11.75 was distributed via ads on Android apps like Snaptube and VidMate

Cyber News, Cyber Threat Trends
  • by
  • October 14, 2022

S3 Ep104: Should hospital ransomware attackers be locked up for life? [Audio + Text]

Have your say on three deep questions posed by this week’s podcast. Read or listen as suits you best…

Cyber News, Cyber Threat Trends

Chinese APT WIP19 Targets IT Service Providers and Telcos

The group is characterized by the use of a stolen digital certificate issued by DEEPSoft

Cyber News, Cyber Threat Trends
  • by
  • October 14, 2022

New Chinese attack framework Alchimist serves Windows, Linux, and macOS implants

Researchers have discovered a new attack framework of Chinese origin that they believe is being used in the wild. The framework is made up of a command-and-control (C2) backend dubbed Alchimist and an accompanying customizable remote access Trojan (RAT) for Windows and Linux machines. The framework can also be used to generate PowerShell-based attack shellcode […]

Cyber News, Cyber Threat Trends

Samsung unveils latest smartphones, smart devices and Galaxy Watch

At the Samsung Developer Conference 2022, the company also discussed its plans for personalized experiences, security and privacy. The post Samsung unveils latest smartphones, smart devices and Galaxy Watch appeared first on TechRepublic.

Cyber News, Cyber Threat Trends
  • by
  • October 14, 2022

PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks

A proof-of-concept (PoC) exploit code has been made available for the recently disclosed critical security flaw affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager, making it imperative that users move quickly to apply the patches. “FortiOS exposes a management web portal that allows a user to configure the system,” Horizon3.ai researcher James Horseman said. “Additionally, a user can

Cyber News, Cyber Threat Trends