cybersecurityawareness Archives

Lokibot AgentTesla Grow in January 2023’s Most Wanted Malware List

15Feb

By RBNo Comments

Risk, Security

Lokibot AgentTesla Grow in January 2023’s Most Wanted Malware List

According to Check Point's Global Threat Index report for January 2023, AgentTesla is back in the top three spots on the list of the Most Wanted Malware for January 2023 after falling to ninth place in December 2022. The Lokibot info stealer has also advanced significantly, moving up the ranking from not even making the top 10 to second. Furthermore, the data-stealer Vidar, which was seen spreading through phony domains purporting to be connected with remote desktop software provider AnyDesk, has re-entered the top 10 list following an upsurge in incidents of "brandjacking." To drive users to a single IP address posing as the legitimate AnyDesk website, the malware employed URL jacking for a number of well-known applications Check Point read more Lokibot AgentTesla Grow in January ...

VMware Finds No Evidence of 0-Day in Ongoing ESXiArgs Ransomware Spree

7Feb

By RBNo Comments

Risk, Security

VMware Finds No Evidence of 0-Day in Ongoing ESXiArgs Ransomware Spree

On Monday, VMware stated that it had not discovered any proof that threat actors were using a zero-day vulnerability in its software as part of an ongoing global ransomware attack campaign. The virtualization services provider stated that the majority of complaints indicate that End of General Support (EoGS) and/or significantly out-of-date products are being targeted with known vulnerabilities that have already been patched and publicised in VMware Security Advisories (VMSAs). Additionally, the business advises users to update to the most recent supported releases of vSphere components in order to resolve known concerns and turn off the OpenSLP service in ESXi read the complete article VMware Finds No Evidence of 0-Day in Ongoing ESXiArgs Ransomware Spree.

Iranian Threat Actor Neptunium Associated With Charlie Hebdo Cyber Attacks

7Feb

By RBNo Comments

Business, Risk, Security

Iranian Threat Actor Neptunium Associated With Charlie Hebdo Cyber Attacks

Microsoft has linked the latest hacking effort against the parody French magazine Charlie Hebdo to the Iranian threat actor known as Neptunium. The information was released last Friday by Microsoft's Digital Threat Analysis Center (DTAC), which also noted that Neptunium is probably the same group that the US Department of Justice (DoJ) has previously referred to as "Emennet Pasargad." The blog post states, "In early January, a then-unknown internet group identifying itself as 'Holy Souls,' which we can now identify as Neptunium read the complete article Iranian Threat Actor Neptunium Associated With Charlie Hebdo Cyber Attacks. To read these types of recent cyber attacks news follow ReconBee.com regularly

Zero-trust security becoming a significant element for enterprises in adopting cybersecurity solutions

6Feb

By RBNo Comments

Risk, Security

Zero-trust security becoming a significant element for enterprises in adopting cybersecurity solutions

Cybersecurity-related news stories predominate. There seems to be an endless assortment of unrelenting assaults against corporations, including ransomware, phishing, and denial-of-service attacks. Unfortunately, cyberattacks have an impact on businesses financially in addition to making news about them. Enterprises have been compelled to align their security policies based on business intent due to the rise in cloud apps, mobile devices, remote workers, and IoT-connected equipment. In the past, cybersecurity professionals tended to place a higher priority on safeguarding users and company assets read the complete article Zero trust security becoming a significant element for enterprises in adopting cybersecurity solutions. To learn cybersecurity and cybersecurity awareness blog...

QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates

31Jan

By RBNo Comments

Risk, Security

QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates

A severe security hole affecting its network-attached storage (NAS) devices that might result in arbitrary code injection has been fixed by Taiwanese manufacturer QNAP through the delivery of updates. The vulnerability, tracked as CVE-2022-27596, has a CVSS rating of 9.8 out of a possible 10. Both QTS 5.0.1 and QuTS Hero H5.0.1 are affected. In a monday advisory, QNAP stated that if exploited, the vulnerability would allow remote attackers to inject malicious code. The NIST National Vulnerability Database (NVD) has identified the weakness as a SQL injection vulnerability despite the fact that the precise technical details around it are unclear read the complete article QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates. For recent and latest cybersec...

5Jan

By RBNo Comments

Risk, Security

NIELIT and Microsoft collaborate to train youth in cybersecurity skills for jobs

Through the Cyber Shikshaa and Ready4Cybersecurity projects, the National Institute of Electronics & Information Technology (NIELIT) and Microsoft plan to provide access to cybersecurity expertise for underserved adolescents, women, and job seekers in rural locations. As part of NIELIT's efforts to close the cybersecurity skills gap in the nation, these programs will be implemented in 30 training facilities in Tier 2 and Tier 3 towns, with an emphasis on Jammu & Kashmir, Ladakh, and the North-East area of India. The modern digital economy is currently facing significant issues related to the worldwide cybersecurity skills gap and the lack of diversity in the cybersecurity profession read the complete article NIELIT and Microsoft collaborate to train youth in cybersecurity sk...