Tag: response capabilities

  • Cloud Blog: How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/time-to-exploit-trends-2023/ Source: Cloud Blog Title: How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends Feedly Summary: Written by: Casey Charrier, Robert Weiner Mandiant analyzed 138 vulnerabilities that were disclosed in 2023 and that we tracked as exploited in the wild. Consistent with past analyses, the majority (97) of these vulnerabilities were…

  • Schneier on Security: Perfectl Malware

    Source URL: https://www.schneier.com/blog/archives/2024/10/perfectl-malware.html Source: Schneier on Security Title: Perfectl Malware Feedly Summary: Perfectl in an impressive piece of malware: The malware has been circulating since at least 2021. It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions of machines connected to the Internet potential targets, researchers from Aqua…

  • Slashdot: European Govt Air-Gapped Systems Breached Using Custom Malware

    Source URL: https://it.slashdot.org/story/24/10/11/1811217/european-govt-air-gapped-systems-breached-using-custom-malware?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: European Govt Air-Gapped Systems Breached Using Custom Malware Feedly Summary: AI Summary and Description: Yes Summary: An advanced persistent threat (APT) group named GoldenJackal has been successful in breaching air-gapped government systems in Europe, employing custom tools to steal sensitive information. This activity raises significant concerns about the security…

  • Slashdot: US Officials Race To Understand Severity of China’s Salt Typhoon Hacks

    Source URL: https://news.slashdot.org/story/24/10/11/1445231/us-officials-race-to-understand-severity-of-chinas-salt-typhoon-hacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: US Officials Race To Understand Severity of China’s Salt Typhoon Hacks Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant hacking incident linked to a Chinese group that targeted major U.S. broadband providers, raising concerns about national security and the implications of cyber espionage on…

  • Microsoft Security Blog: ​​Cyber Signals Issue 8 | Education under siege: How cybercriminals target our schools​​

    Source URL: https://www.microsoft.com/en-us/security/blog/2024/10/10/cyber-signals-issue-8-education-under-siege-how-cybercriminals-target-our-schools/ Source: Microsoft Security Blog Title: ​​Cyber Signals Issue 8 | Education under siege: How cybercriminals target our schools​​ Feedly Summary: ​This edition of Cyber Signals delves into the cybersecurity challenges facing classrooms and campuses, highlighting the critical need for robust defenses and proactive measures. From personal devices to virtual classes and research…

  • The Register: Moscow-adjacent GoldenJackal gang strikes air-gapped systems with custom malware

    Source URL: https://www.theregister.com/2024/10/09/goldenjackal_custom_malware/ Source: The Register Title: Moscow-adjacent GoldenJackal gang strikes air-gapped systems with custom malware Feedly Summary: USB sticks help, but it’s unclear how tools that suck malware from them are delivered A cyberespionage APT crew named GoldenJackal hacked air-gapped PCs belonging to government and diplomatic entities at least twice using two sets of…