Cyber Defense Advisors

News

  • by
  • March 30, 2023

APT group Winter Vivern exploits Zimbra webmail flaw to target government entities

An APT group known in the security industry as Winter Vivern has been exploiting a vulnerability in the Zimbra Collaboration software to gain access to mailboxes from government agencies in several European countries. While no clear links have been established between Winter Vivern and a particular country’s government, security researchers have noted that its activities […]

Cyber News, Cyber Threat Trends
  • by
  • March 30, 2023

Fixing Vulnerabilities can be messy;

and so it is Continue reading on The CISO Den »

Cyber News, Cyber Threat Trends
  • by
  • March 30, 2023

Stop Blaming the End User for Security Risk

Don’t count on securing end users for system security. Instead, focus on better securing the systems — make them closed by default and build with a security-first approach.

Cyber News, Cyber Threat Trends

Nexus Android malware targets 450 financial applications

Learn how to protect your organization and users from this Android banking trojan. The post Nexus Android malware targets 450 financial applications appeared first on TechRepublic.

Cyber News, Cyber Threat Trends
  • by
  • March 29, 2023

The CISO Mantra: Get Ready to Do More With Less

For the foreseeable future, with the spigots closing shut, CISOs will need to find ways to do more with less.

Cyber News, Cyber Threat Trends

Security Vulnerabilities in Snipping Tools

Both Google’s Pixel’s Markup Tool and the Windows Snipping Tool have vulnerabilities that allow people to partially recover content that was edited out of images.

Cyber News, Cyber Threat Trends
  • by
  • March 28, 2023

Breaking the Mold: Pen Testing Solutions That Challenge the Status Quo

Malicious actors are constantly adapting their tactics, techniques, and procedures (TTPs) to adapt to political, technological, and regulatory changes quickly. A few emerging threats that organizations of all sizes should be aware of include the following: Increased use of Artificial Intelligence and Machine Learning: Malicious actors are increasingly leveraging AI and machine learning to

Cyber News, Cyber Threat Trends
  • by
  • March 28, 2023

IcedID Malware Shifts Focus from Banking Fraud to Ransomware Delivery

Multiple threat actors have been observed using two new variants of the IcedID malware in the wild with more limited functionality that removes functionality related to online banking fraud. IcedID, also known as BokBot, started off as a banking trojan in 2017. It’s also capable of delivering additional malware, including ransomware. “The well-known IcedID version consists of […]

Cyber News, Cyber Threat Trends
  • by
  • March 28, 2023

Pakistan-Origin SideCopy Linked to New Cyberattack on India’s Ministry of Defence

An advanced persistent threat (APT) group that has a track record of targeting India and Afghanistan has been linked to a new phishing campaign that delivers Action RAT. According to Cyble, which attributed the operation to SideCopy, the activity cluster is designed to target the Defence Research and Development Organization (DRDO), the research and development wing of India’s […]

Cyber News, Cyber Threat Trends