News & Updates

Four Plead Guilty in FBI’s Latest DDoS-for-Hire Sweep

Four US citizens have pleaded guilty to committing cybercrimes after the FBI
announced it took down 13 domains linked to hacker-for-hire services.

The seizures announced by the US Department of Justice this week form a third
wave of actions against prominent booter/stressor services that allow paying
hackers to launch powerful distributed denial-of-service (DDoS) attacks against
various targets.

“Data relating to the operation of booter sites previously seized by law
enforcement show that hund

Cybersecurity Tools

Heimdal® Takes Home Top Honors at Security Excellence Awards for Risk Management

We are thrilled to announce that Heimdal® has been awarded the Risk Management Award at the Security Excellence Awards 2023 for our innovative Patch and Asset Management solution!  This award recognizes our commitment to providing cutting-edge cybersecurity solutions that help businesses protect themselves from cyber threats. At Heimdal, we understand the critical importance of risk […]

The post Heimdal® Takes Home Top Honors at Security Excellence Awards for Risk Management appeared first on Heimdal Security Blog.

News & Updates

Microsoft Warns of State-Sponsored Attacks Exploiting Critical PaperCut Vulnerability

Iranian nation-state groups have now joined financially motivated actors in actively exploiting a critical flaw in PaperCut print management software, Microsoft said.
The tech giant’s threat intelligence team said it observed both Mango Sandstorm (Mercury) and Mint Sandstorm (Phosphorus) weaponizing CVE-2023-27350 in their operations to achieve initial access.
“This activity shows Mint
News & Updates

Most Dutch cybercrime victims don’t tell the police

One striking result to emerge from the studies and surveys about online fraud
and scams in the Netherlands is that too few victims report them to the police.

In 2021, nearly 2.5 million people in the Netherlands aged 15 or older said they
had fallen victim to cybercrime.

However, less than half report an online crime, and 1 in 5 contacts the police.
Of all victims of online crime, 19% have reported it to the police and 47%
percent have reported it to an authority or within their own circle.

News & Updates

Small- and medium-sized businesses: don’t give up on cybersecurity

In today’s increasingly hostile environment, every enterprise, be they big or small, should be concerned about cybersecurity and have access to protection from hackers, scammers, phishers, and all the rest of the host of bad actors who seem to be sprouting up around the world.

Yet time and again, we see small- and medium-sized businesses (SMBs) left out in the cold, an unaddressed market segment that finds real protection either too expensive or far too complex to adopt. Thus, cybersecurity becomes an “afterthought” or “add when we can” kind of service that leaves SMBs far more vulnerable than the corporate giants — just reading the news every day shows even they aren’t immune to ransomware, intrusions, and data theft.

To read this article in full, please click here

News & Updates

7 VPN alternatives for securing remote network access

Once the staple for securing employees working remotely, VPNs were designed to provide secure access to corporate data and systems for a small percentage of a workforce while the majority worked within traditional office confines. The move to mass remote working brought about by COVID-19 in early 2020 changed things dramatically. Since then, it has become the norm for large numbers of employees to regularly work from home, with many only going to the office sporadically (if at all).

VPNs are insufficient for the remote working and hybrid landscape, and an overreliance on them to secure large numbers of employees working from home poses significant risks. “VPNs originally helped companies manage a few employees or third-party contractors who needed remote access to certain systems while working remotely,” Joseph Carson, chief security scientist and advisory CISO at ThycoticCentrify, tells CSO. He adds that it has also led to negative impacts on employee productivity and user experience, all adding to increased friction.

To read this article in full, please click here

Threats

SmokeLoader Malware Detection: UAC-0006 Group Reemerges to Launch Phishing Attacks Against Ukraine Using Financial Subject Lures

The financially-motivated hacking collective tracked as UAC-0006 comes back to the cyber threat arena exploiting the phishing attack vector and distributing the SmokeLoader malware. According to the latest CERT-UA cybersecurity alert, threat actors massively distribute phishing emails exploiting the compromised accounts with the financially related email subject and using a malicious ZIP attachment to deploy […]

The post SmokeLoader Malware Detection: UAC-0006 Group Reemerges to Launch Phishing Attacks Against Ukraine Using Financial Subject Lures appeared first on SOC Prime.

News & Updates

Twitter Security Breach Exposes Private Circle Posts to the Public

In April 2023, a security lapse at Twitter resulted in the inadvertent exposure
of private Circle posts to a broader audience, prompting concerns about privacy
on the platform. Although users had promptly reported the problem, Twitter only
sent users an official email notification about a month after the incident.

“We’re contacting you because your Twitter account may have been potentially
impacted by a security incident that occurred earlier this year (April 2023),”
reads the email [https://tw

Exit mobile version