Sophisticated phishing campaign leverages public services, where remote access Trojans are being delivered via malicious Java downloader A new phishing campaign has surfaced this week which cleverly employs a Java-based downloader to distribute remote access trojans (RATs), such as VCURMS…
Tag: Security Boulevard
Building a Security Culture of Shared Responsibility
These seven major factors can contribute to (or hinder) the development of a positive cybersecurity culture. The post Building a Security Culture of Shared Responsibility appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the…
SVG Files Abused in Emerging Campaigns
By Max Gannon Scalable Vector Graphic files, or SVG files, are image files that have become an advanced tactic for malware delivery that has greatly evolved over time. The use of SVG files to deliver malware was made even easier…
Charting a Course for Cybersecurity
Over the past months, headlines have been marked by persistent conflicts in Ukraine and Israel. Cybercriminals took—and continue to take—advantage of a volatile geopolitical situation and relentlessly exploited vulnerabilities. 2023 also saw the rise of generative AI involvement in cyber…
Phishing Threats Rise as Malicious Actors Target Messaging Platforms
As messaging apps like Telegram gain popularity, cybercriminals are increasingly finding they are an attractive vector for phishing attacks. The post Phishing Threats Rise as Malicious Actors Target Messaging Platforms appeared first on Security Boulevard. This article has been indexed…
How Real-Time Personal Cybersecurity and Botnet Detection Protects Corporate Executives
The specter of botnet infections looms large over corporate executives, posing not just a threat to their personal data, but also to the integrity and security of their entire organizations. Botnets are networks of private computers infected with malicious software…
What is Identity Governance: 5 Steps to Build Your Framework
From financial records to employees’ personal details, almost all information nowadays is highly sensitive – and, therefore, highly valuable to attackers. With 61% of data breaches involving credentials, it’s unsurprising that Identity and Access Management (IAM) is showcasing such rapid…
Mitigating Risks in the Age of AI Agents
#TLDR AI agent technology, using Large Language Models, is transforming modern enterprises as it provides software and digital assistance. However it introduces significant security risks like data exposure and supply chain risks. This blog examines these issues and highlights Symmetry…
Tweaks Stealer Targets Roblox Users Through YouTube and Discord
IntroductionZscaler’s ThreatLabz recently discovered a new campaign distributing an infostealer called Tweaks (aka Tweaker) that targets Roblox users. Attackers are exploiting popular platforms, like YouTube and Discord, to distribute Tweaks to Roblox users, capitalizing on the ability of legitimate platforms…
DOJ Warns Using AI in Crimes Will Mean Harsher Sentences
U.S. Deputy Attorney General Lisa Monaco last month was in the UK speaking at the University of Oxford and outlining the different paths the Justice Department is taking to address the benefits and threats associated with AI. Monaco spoke about…
Control the Network, Control the Universe
March 19, 2024Time: 1:00 pm ET | 10:00 am PT The ever-evolving landscape of network security faced new challenges in 2023 as hackers developed sophisticated methods to exploit vulnerabilities in network devices. Join Nate Warfield, Director of Threat Research, as…
Broadcom Merging Carbon Black, Symantec to Create Security Unit
Carbon Black’s uncertain future following the closing of Broadcom’s $69 billion acquisition of VMware in November is now settled, with the security software business merging with Symantec to form Broadcom’s new Enterprise Security Group. Broadcom will make “significant investments in…
DTEX i³ Issues Threat Advisory for Detecting the Use of Multiple Identities
The DTEX i3 team has issued a new Threat Advisory following recent investigations linking the use of multiple personal accounts on corporate devices with side gigs and the spread of extremist materials. The i3 Threat Advisory highlights how lenient security…
ChatGPT and Beyond: Generative AI in Security
The application of generative AI in security is a game-changer, offering novel solutions to pressing challenges in cybersecurity. The post ChatGPT and Beyond: Generative AI in Security appeared first on Security Boulevard. This article has been indexed from Security Boulevard…
Read the Latest NIST Cybersecurity Framework Updates
This blog reviews NIST cybersecurity framework 2.0 updates, and the difference between the CSF and NIST’s data privacy framework. The post Read the Latest NIST Cybersecurity Framework Updates appeared first on Security Boulevard. This article has been indexed from Security…
Mitigating Lurking Threats in the Software Supply Chain
The first step to addressing software supply chain vulnerabilities and threats is to understand the most common attacks. Here’s where to start. The post Mitigating Lurking Threats in the Software Supply Chain appeared first on Security Boulevard. This article has…
The Rise of AI Worms in Cybersecurity
The swift advancement of generative AI systems like OpenAI’s ChatGPT and Google’s Gemini has brought about a new era of technological ease. A recent report from CyberArk illustrates the transformative impact of AI on cyber threats and security strategies. The…
Alert: FBI Warns Of BlackCat Ransomware Healthcare Attack
In recent months, a concerning trend has emerged within the healthcare sector: the resurgence of BlackCat ransomware attacks. The BlackCat ransomware healthcare attack has prompted a joint advisory from the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security…
Oh No! My JSON Keys and Values are Separated! How Can I Extract Them For My Searches?
Splunk parses pure JSON logs almost like magic. The format works really well for Splunk to automatically extract fields you would need in your searches. However, an issue arises when a JSON log separates the key and the value into…
Enable Sharing of Datamodel Acceleration Summaries between Search Heads
Introduction If you’re running Splunk Enterprise Security Suite, you are already leveraging accelerated datamodels to power your detections and altering. However, there may be situations where you want to leverage those same datamodels you already have when running searches on…