Tag: defense

Source URL: https://mobile.slashdot.org/story/24/11/22/2331247/russian-spies-jumped-from-one-network-to-another-via-wi-fi?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Russian Spies Jumped From One Network To Another Via Wi-Fi Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant cybersecurity breach investigated by Veloxity, detailing how Russian hackers were able to daisy-chain multiple Wi-Fi networks to conduct sophisticated intrusions. This case study illustrates the evolving…

Wired: Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack

—

by

Source URL: https://www.wired.com/story/russia-gru-apt28-wifi-daisy-chain-breach/ Source: Wired Title: Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack Feedly Summary: In a first, Russia’s APT28 hacking group appears to have remotely breached the Wi-Fi of an espionage target by hijacking a laptop in another building across the street. AI Summary and Description: Yes…

CSA: Should the CISO Role Be Split?

—

by

Source URL: https://www.zscaler.com/cxorevolutionaries/insights/its-time-split-ciso-role-if-we-are-save-it Source: CSA Title: Should the CISO Role Be Split? Feedly Summary: AI Summary and Description: Yes Summary: The article discusses the increasing challenges faced by Chief Information Security Officers (CISOs), propounding the idea of splitting the CISO role to alleviate burdens and enhance specialization. It highlights the necessity to adapt organizational structures…

The Register: SafePay ransomware gang claims Microlise attack that disrupted prison van tracking

—

by

Source URL: https://www.theregister.com/2024/11/22/safepay_microlise/ Source: The Register Title: SafePay ransomware gang claims Microlise attack that disrupted prison van tracking Feedly Summary: Fledgling band of crooks says it stole 1.2 TB of data The new SafePay ransomware gang has claimed responsibility for the attack on UK telematics biz Microlise, giving the company less than 24 hours to…

The Register: Here’s what happens if you don’t layer network security – or remove unused web shells

—

by

Source URL: https://www.theregister.com/2024/11/22/cisa_red_team_exercise/ Source: The Register Title: Here’s what happens if you don’t layer network security – or remove unused web shells Feedly Summary: TL;DR: Attackers will break in and pwn you, as a US government red team demonstrated The US Cybersecurity and Infrastructure Agency often breaks into critical organizations’ networks – with their permission,…

Hacker News: Security researchers identify new malware targeting Linux

—

by

Source URL: https://www.welivesecurity.com/en/eset-research/unveiling-wolfsbane-gelsemiums-linux-counterpart-to-gelsevirine/ Source: Hacker News Title: Security researchers identify new malware targeting Linux Feedly Summary: Comments AI Summary and Description: Yes Summary: ESET researchers have revealed the emergence of Linux malware associated with the Gelsemium APT group, marking a significant shift in their tactics as they move beyond Windows-targeted malware. The malware includes notable…

Hacker News: Listen to the whispers: web timing attacks that work

—

by

Source URL: https://portswigger.net/research/listen-to-the-whispers-web-timing-attacks-that-actually-work Source: Hacker News Title: Listen to the whispers: web timing attacks that work Feedly Summary: Comments AI Summary and Description: Yes **Summary:** This text introduces novel web timing attack techniques capable of breaching server security by exposing hidden vulnerabilities, misconfigurations, and attack surfaces more effectively than previous methods. It emphasizes the practical…

Alerts: CISA Releases Insights from Red Team Assessment of a U.S. Critical Infrastructure Sector Organization

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-releases-insights-red-team-assessment-us-critical-infrastructure-sector-organization Source: Alerts Title: CISA Releases Insights from Red Team Assessment of a U.S. Critical Infrastructure Sector Organization Feedly Summary: Today, CISA released Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a U.S. Critical Infrastructure Sector Organization in coordination with the assessed organization. This cybersecurity advisory details lessons learned and key…

Cisco Security Blog: Cisco Secure Workload: Leading in Segmentation Maturity

—

by