A list of topics we covered in the week of December 9 to December 15 of 2024 This article has been indexed from Malwarebytes Read the original article: A week in security (December 9 – December 15)
Category: EN
Detection engineering at scale: one step closer (part one)
Security Operations Center (SOC) and Detection Engineering teams frequently encounter challenges in both creating and maintaining detection rules, along with their associated documentation, over time. These difficulties stem largely from the sheer number of detection rules required to address a…
North Korean IT Workers ‘Made Millions’ From US Companies
Group of North Korean IT workers made at least $88m from fraudulently obtained US IT jobs, extortion payments, officials say This article has been indexed from Silicon UK Read the original article: North Korean IT Workers ‘Made Millions’ From US…
Health chatbot exposed, credit union cyberattack, infrastructure cyberweapon attack
UnitedHealth’s AI-driven insurance claims chatbot left exposed to the internet South Carolina credit union suffers cyberattack IOCONTROL cyberweapon targets infrastructure in the US and Israel Thanks to today’s episode sponsor, ThreatLocker Do zero-day exploits and supply chain attacks keep you…
LW ROUNDTABLE: Lessons learned from the headline-grabbing cybersecurity incidents of 2024
It’s all too clear that the cybersecurity community, once more, is facing elevated challenges as well as opportunities. Part one of a four-part series The world’s reliance on interconnected digital infrastructure continues to deepen, even as the threats facing it…
New Linux Rootkit Avoids Detection: Cyber Security Today for Monday, December 16th, 2024
PumaKit Linux Rootkit, Windows Defender Flaw, and Android Malware Outbreak! In today’s episode of Cybersecurity Today, host Jim Love delves into the discovery of the advanced Linux rootkit PumaKit, critical vulnerabilities in Microsoft’s Windows Defender, a new multi-platform malware campaign…
Serbian police used Cellebrite to unlock, then plant spyware, on a journalist’s phone
Amnesty said it found NoviSpy, an Android spyware linked to Serbian intelligence, on the phones of several members of Serbian civil society following police stops. © 2024 TechCrunch. All rights reserved. For personal use only. This article has been indexed…
How Man-in-the-Middle Attacks Can Be Thwarted
Man-in-the-middle (MITM) attacks are a significant cybersecurity threat, where an attacker intercepts and potentially alters communication between two parties without their knowledge. These attacks are particularly concerning in online environments, where sensitive data like login credentials, credit card information, and…
Ukrainian Minors Recruited for Cyber Ops and Reconnaissance in Russian Airstrikes
The Security Service of Ukraine (SBU or SSU) has exposed a novel espionage campaign suspected to be orchestrated by Russia’s Federal Security Service (FSB) that involves recruiting Ukrainian minors for criminal activities under the guise of “quest games.” Law enforcement…
Cybersecurity News Headlines Trending on Google
Surge in Passkey Security Adoption in 2024 Tech giants such as Google, Amazon, Microsoft, and Facebook are leading the charge in moving away from traditional passwords, embracing passkey security technology. As of 2024, passkey adoption has seen a significant increase.…
With DORA approaching, financial institutions must strengthen their cyber resilience
The clock is ticking for financial institutions across the EU as the January 17, 2025, deadline for the Digital Operational Resilience Act (DORA) approaches. This regulation will reshape how organizations in the financial sector approach cybersecurity and operational resilience. It…
Malicious ad distributes SocGholish malware to Kaiser Permanente employees
A fraudulent Google ad meant to phish employees for their login credentials redirects them to a fake browser update page instead. This article has been indexed from Malwarebytes Read the original article: Malicious ad distributes SocGholish malware to Kaiser Permanente…
Trapster Community: Open-source, low-interaction honeypot
Trapster Community is an open-source, lightweight, low-interaction honeypot designed for deployment within internal networks. It enhances network security by creating a deceptive layer that monitors and detects suspicious activities. “Our reengineered approach leverages the asyncio library, breaking away from the…
How companies can address bias and privacy challenges in AI models
In this Help Net Security interview, Emre Kazim, Co-CEO of Holistic AI, discusses the need for companies to integrate responsible AI practices into their business strategies from the start. He explores how addressing issues like bias, privacy, and transparency requires…
Overlooking platform security weakens long-term cybersecurity posture
Platform security – securing the hardware and firmware of PCs, laptops and printers – is often overlooked, weakening cybersecurity posture for years to come, according to HP. The report, based on a global study of 800+ IT and security decision-makers…
File-Sharing Tools Under Attack: What Users Need to Know
A serious flaw has been found in three widely used file-sharing tools, putting several organizations at risk of security breaches. The three tools affected, LexiCom, VLTransfer, and Harmony, are all developed by Cleo, a company focused on managed file…
ISC Stormcast For Monday, December 16th, 2024 https://isc.sans.edu/podcastdetail/9256, (Mon, Dec 16th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, December 16th, 2024…
Navigating HIPAA Compliance When Using Tracking Technologies on Websites
Websites have become indispensable tools for healthcare organizations to connect with patients, streamline operations, and enhance service delivery. Modern websites are composed of components that “build” unique user experiences in real time.However, the use of tracking technologies on these websites…
DEF CON 32 – Fireside Chat – The Dark Tangent and National Cyber Director Harry Coker, Jr
Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink The post DEF CON…
Empower Your SOC Teams with Cloud-Native Security Solutions
Can Cloud-Native Security Be a Game-Changer for Your SOC Teams? In today’s complex digital landscape, organizations are increasingly challenged to protect their data while ensuring compliance with evolving cybersecurity regulations. From finance to healthcare, businesses are recognizing the need for…