Cybersecurity

South St. Paul Public Schools investigating potential cybersecurity threat

South St. Paul Public Schools alerted families this week to an ongoing technology disruption that is being investigated. Staff and families were notified Monday of technical difficulties “that may disrupt certain services” like online platforms, emails and other digital services. On Tuesday the district said it had been made aware of “unauthorized activity within our […]

Cybersecurity

Human vs. Non-Human Identity in SaaS

In today’s rapidly evolving SaaS environment, the focus is on human users. This is one of the most compromised areas in SaaS security management and requires strict governance of user roles and permissions, monitoring of privileged users, their level of activity (dormant, active, hyperactive), their type (internal/ external), whether they are joiners, movers, or leavers, […]

Cybersecurity

The Art of Domain Deception: Bifrost’s New Tactic to Deceive Users

This post is also available in: 日本語 (Japanese) Executive Summary We recently found a new Linux variant of Bifrost (aka Bifrose), showcasing an innovative technique to evade detection. It uses a deceptive domain, download.vmfare[.]com, which mimics the legitimate VMware domain. This latest version of Bifrost aims to bypass security measures and compromise targeted systems. First […]

Cybersecurity

Diving Into Glupteba’s UEFI Bootkit

This post is also available in: 日本語 (Japanese) Executive Summary Glupteba is advanced, modular and multipurpose malware that, for over a decade, has mostly been seen in financially driven cybercrime operations. This article describes the infection chain of a new campaign that took place around November 2023. Despite being active for over a decade, certain […]

Cybersecurity

National cyber director urges private sector collaboration to counter nation-state cyber threat

National Cyber Director Harry Coker this week reiterated prior warnings that hackers linked to the People’s Republic of China are actively working to gain access to critical infrastructure in the U.S. to potentially launch malicious attacks.  Coker, in his first major speech in Washington since he was confirmed in December, said the state-linked threat actors […]