Cybersecurity
Category Added in a WPeMatico Campaign
For years, the Middle East has maintained its reputation as a fertile ground for advanced persistent threats (APTs). In the midst of routine monitoring of suspicious activities on the systems of high-profile customers, some based in this region, ESET Research stumbled upon a very sophisticated and unknown backdoor that we have named Deadglyph. We derived […]
Sep 25, 2023THNSpyware / Cyber Espionage Tibetan, Uyghur, and Taiwanese individuals and organizations are the targets of a persistent campaign orchestrated by a threat actor codenamed EvilBamboo to gather sensitive information. “The attacker has created fake Tibetan websites, along with social media profiles, likely used to deploy browser-based exploits against targeted users,” Volexity security researchers […]
The Cybersecurity and Infrastructure Security Agency is urging the software industry to embrace the use of memory safe programming languages as part of a wider effort to eliminate security vulnerabilities in code. CISA called for the changes alongside a push to embrace secure-by-design practices during the software development stage and to increase the security of […]
Cloud Access Security Brokers (CASB) , Data Loss Prevention (DLP) , Endpoint Security Equity Investment Will Allow Cato Networks to Tightly Integrate CASB, DLP With SASE Michael Novinson (MichaelNovinson) • September 22, 2023 Shlomo Kremer, co-founder and CEO, Cato Networks (Image: Cato Networks) A late-stage SASE startup led by a serial entrepreneur hauled […]
Is Gelsemium APT behind a targeted attack in Southeast Asian Government? Pierluigi Paganini September 25, 2023 A stealthy APT group tracked as Gelsemium was observed targeting a Southeast Asian government between 2022 and 2023. Palo Alto Unit42 researchers an APT group tracked as Gelsemium targeting a Southeast Asian government. The experts tracked the cluster as […]
One of the first North American organizations to suffer a data breach because of a vulnerability in the MOVEit file-transfer software says it has notified more than 165,000 people that their personal information was stolen. The government of Nova Scotia said on Thursday that it has finished sending letters to all victims of the incident […]
The Known Exploited Vulnerabilities (KEV) Catalog maintained by the US cybersecurity agency CISA has led to significant improvements in federal agencies’ patching efforts, with more than 1,000 vulnerabilities now included in the list. Launched in November 2021, the KEV Catalog lists flaws that CISA has proof are being exploited in malicious attacks, and is accompanied […]
New Zealand’s third-largest university has been able to continue operating despite a cyberattack that forced officials to isolate affected servers. The Auckland University of Technology serves more than 29,000 students across three campuses in the country’s largest metropolitan area. Jeremy Scott, senior corporate communications manager at the university, told Recorded Future News that the school […]
More than 97% of the world’s internet traffic passes through subsea cables at some point, according to ENISA. Subsea cables are a vital component of the global internet infrastructure, and it is critical to protect them from cyberattacks, physical attacks and other threats. What are the challenges? With the growing reliance on the internet, and […]