Szolgáltatóknak

This week, I'm teaching FOR610 in Manchester, and while my students are busy resolving some challenges, I'm looking at my hunting results from the previous days. I found an interesting sample. The file was delivered via an email with a URL pointing to a well-known file-sharing service: hxxps://www[.]Mediafire[.]com/file/o3m15ydxnhlm9w0/New+Purchase+Order+pdf.tgz/file. The file is not available anymore, but I was able to find it back on VirusTotal: "New Purchase Order pdf.tgz" (SHA256:7f351b32e6209496ef59c511dffaf9312508b53e476b1e77171af3d433b94087[1]) with a low score of 3/54.

Enterprise artificial intelligence security and trust software provider Cranium.ai has secured $25 million from a Series A funding round, bringing total investment to $32 million, according to SiliconAngle.

Increasingly prevalent cyberattacks against healthcare organizations across the U.S. have prompted the Cybersecurity and Infrastructure Security Agency and the Department of Health and Human Services to unveil a new healthcare cybersecurity toolkit, SecurityWeek reports.

U.S. federal agencies have experienced a significant reduction in known exploited security flaws across the networks since the release of the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog more than two years ago, according to The Record, a news site by cybersecurity firm Recorded Future.

Malicious Android apps on Google Play that included adware have been downloaded more than two million times, reports BleepingComputer.

BleepingComputer reports that French government agencies, universities, businesses, research institutes, and think tanks had their networks compromised by Russian state-sponsored threat operation APT28, also known as Fancy Bear and Strontium, in cyberespionage attacks that commenced during the last six months of 2021.

New IMAPLoader malware attacks deployed by Iranian threat operation New watering hole attacks have been launched by Iranian state-sponsored advanced persistent threat operation Tortoiseshell, also known as TA456, Imperial Kitten, Yellow Liderc, and Crimson Sandstorm, to facilitate the distribution of the IMAPLoader malware, The Hacker News reports.

HTTP distributed denial-of-service attacks increased by 65% between the second and third quarters of 2023, while layer 3/4 DDoS attacks targeted at compromising infrastructure resources have risen by 14% over the same period, reports SiliconAngle.

More than a million Windows and Linux systems have been compromised by the sophisticated StripedFly malware framework between 2017 and 2022, according to BleepingComputer.

Try these tricks for devising an education program that gets employees invested — and stays with them after the training is over.