Cyber Defense Advisors

News

  • by
  • January 18, 2024

Canadian Citizen Gets Phone Back from Police

After 175 million failed password guesses, a judge rules that the Canadian police must return a suspect’s phone. [Judge] Carter said the investigation can continue without the phones, and he noted that Ottawa police have made a formal request to obtain more data from Google. “This strikes me as a potentially more fruitful avenue of […]

Cyber News
  • by
  • January 18, 2024

MFA Spamming and Fatigue: When Security Measures Go Wrong

In today’s digital landscape, traditional password-only authentication systems have proven to be vulnerable to a wide range of cyberattacks. To safeguard critical business resources, organizations are increasingly turning to multi-factor authentication (MFA) as a more robust security measure. MFA requires users to provide multiple authentication factors to verify their identity, providing an additional layer of […]

Cyber News
  • by
  • January 18, 2024

PixieFail UEFI Flaws Expose Millions of Computers to RCE, DoS, and Data Theft

Multiple security vulnerabilities have been disclosed in the TCP/IP network protocol stack of an open-source reference implementation of the Unified Extensible Firmware Interface (UEFI) specification used widely in modern computers. Collectively dubbed PixieFail by Quarkslab, the nine issues reside in the TianoCore EFI Development Kit II (EDK II) and could be exploited to achieve remote […]

Cyber News
  • by
  • January 18, 2024

Iranian Hackers Masquerade as Journalists to Spy on Israel-Hamas War Experts

High-profile individuals working on Middle Eastern affairs at universities and research organizations in Belgium, France, Gaza, Israel, the U.K., and the U.S. have been targeted by an Iranian cyber espionage group called Mint Sandstorm since November 2023. The threat actor “used bespoke phishing lures in an attempt to socially engineer targets into downloading malicious files,” […]

Cyber News
  • by
  • January 18, 2024

Smashing Security podcast #355: Fishy Rishi, 23andMe, and the labour of love

Has the British Prime Minister been caught secretly profiting from a cryptocurrency app? Were 23andMe right to blame their users after a data breach? And Indian men have hard feelings after falling for a money-for-sex scam. All this and much much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity […]

Cyber News
  • by
  • January 17, 2024

E-Crime Rapper ‘Punchmade Dev’ Debuts Card Shop

The rapper and social media personality Punchmade Dev is perhaps best known for his flashy videos singing the praises of a cybercrime lifestyle. With memorable hits such as “Internet Swiping” and “Million Dollar Criminal” earning millions of views, Punchmade has leveraged his considerable following to peddle tutorials on how to commit financial crimes online. But […]

Cyber News

The Nuances of SOX Compliance in the Age of Digital Ledgers

The Nuances of SOX Compliance in the Age of Digital Ledgers The world of finance and accounting has undergone a seismic shift with the advent of digital technology, particularly digital ledgers. These innovations have brought about significant changes in the way financial data is recorded, stored, and audited. In this dynamic landscape, ensuring compliance with […]

SOX Compliance

The Emergence of vCISOs in an Age of Remote Workforces

The Emergence of vCISOs in an Age of Remote Workforces The world of work has transformed drastically over the past few years. Remote work has become the new norm, reshaping the way companies operate and redefining the role of cybersecurity. With sensitive data now accessible from various locations, the need for robust cybersecurity measures has […]

Virtual Chief Information Security Officer (vCISO)

Regulatory Compliance Assessments in the World of Crypto Regulations

Regulatory Compliance Assessments in the World of Crypto Regulations The world of cryptocurrency has seen rapid growth and evolution in recent years. While digital currencies like Bitcoin and Ethereum offer exciting opportunities for investors and innovators alike, they have also caught the attention of regulators worldwide. As governments scramble to keep pace with this fast-changing […]

Regulatory Compliance Assessments