Cyber Defense Advisors

News

WooCommerce Bug Exploited in Targeted WordPress Attacks

Wordfence claims over 157,000 sites have been hit so far

Cyber News, Cyber Threat Trends
  • by
  • July 18, 2023

AWS Cloud Credential Stealing Campaign Spreads to Azure, Google Cloud

The TeamTNT threat actor appears to be setting the stage for broader cloud worm attacks, researchers say.

Cyber News, Cyber Threat Trends
  • by
  • July 18, 2023

Ways to Avoid Being Scammed

I heard about multiple scams this week end. How to say safe. Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • July 18, 2023

5 Major Takeaways From Microsoft’s July Patch Tuesday

July’s updates contained 100+ patches and security policy notes, leaving vulnerability management teams stressed and scrambling to prioritize. We’re here to help find some zen.

Cyber News, Cyber Threat Trends
  • by
  • July 18, 2023

Microsoft ‘Logging Tax’ Hinders Incident Response, Experts Warn

A recent email compromise by Chinese APT group Storm-0558 highlights a lack of access to security logging by many Microsoft 365 license holders, prompting calls from researchers to abolish it.

Cyber News, Cyber Threat Trends
  • by
  • July 18, 2023

How AI-Augmented Threat Intelligence Solves Security Shortfalls

Researchers explore how overburdened cyber analysts can improve their threat intelligence jobs by using ChatGPT-like large language models (LLMs).

Cyber News, Cyber Threat Trends
  • by
  • July 18, 2023

Automatically Displaying the Reason A CloudFormation Stack Failed Using AWS CLI

ACM.251 Develop CloudFormation faster by getting information you need to resolve errors more quickly Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • July 18, 2023

Startup Spotlight: Binarly Hardens Firmware Security

The company, one of four finalists in this year’s Black Hat USA Startup Spotlight competition, uses AI/ML to find firmware vulnerabilities.

Cyber News, Cyber Threat Trends
  • by
  • July 18, 2023

JumpCloud Blames ‘Sophisticated Nation-State’ Actor for Security Breach

A little over a week after JumpCloud reset API keys of customers impacted by a security incident, the company said the intrusion was the work of a sophisticated nation-state actor. The adversary “gained unauthorized access to our systems to target a small and specific set of our customers,” Bob Phan, chief information security officer (CISO) at JumpCloud, said in […]

Cyber News, Cyber Threat Trends