Tags → #cybersecurity

Tools
AI Integration in DevSecOps Enhances Software Security Management
Nov 22, 2024 The integration of artificial intelligence into DevSecOps is reshaping security management in software development by enhancing threat detection and automating compliance processes.
Threats
APT-K-47 Group Linked to Sophisticated Cyber Attack Campaign
Nov 22, 2024 The Knownsec 404 Advanced Threat Intelligence team has reported a sophisticated attack campaign attributed to the APT-K-47 organization, which utilizes social engineering tactics related to "Hajj" to compromise systems.
Vulnerabilities
CISA Conducts Cyber Attack Simulation on Critical Organization
Nov 22, 2024 The US Cybersecurity and Infrastructure Agency (CISA) conducted a three-month simulated cyber attack exercise on a critical organization's networks to identify vulnerabilities and enhance security measures.
Breaches
Cyberattack by GruesomeLarch Targets Organizations Linked to Ukraine
Nov 22, 2024 In February 2022, cybersecurity firm Volexity uncovered a cyberattack by the Russian APT group GruesomeLarch, which exploited nearby Wi-Fi networks to gain access to organizations involved in Ukrainian projects.
Threats
Earth Kasha Malware Attacks Target Japan, Taiwan, and India
Nov 22, 2024 Earth Kasha, a cyber threat actor, has been linked to a series of sophisticated malware attacks targeting organizations in Japan, Taiwan, and India, utilizing advanced techniques and evolving malware such as LODEINFO and NOOPDOOR.
Education
Injection Techniques in Computing Environments: A Tutorial
Nov 22, 2024 The article provides a detailed tutorial on using the `ptrace` system call for process injection in Linux, highlighting its functionalities and ethical considerations.
Vulnerabilities
Investigation Reveals SSTI Vulnerabilities in FreeMarker Engine
Nov 22, 2024 Sayaan Alam, a member of the Synack Red Team, has investigated Server-Side Template Injection vulnerabilities in the FreeMarker template engine, revealing potential security risks associated with user input rendering in Java applications.
Tools
New Detection System for Advanced Persistent Threats Introduced
Nov 22, 2024 Researchers have introduced a new detection system named Winemaking, designed to improve the identification of Advanced Persistent Threats (APTs) by addressing limitations in traditional intrusion detection methods.
Threats
NodeStealer Malware Resurfaces with Enhanced Capabilities
Nov 22, 2024 NodeStealer, a Python-based infostealer that has evolved since its initial identification in 2023, poses a significant cybersecurity threat by targeting Facebook accounts and extracting sensitive financial information.
Threats
North Korea Identifies New Cyber Threat Group Moonstone Sleet
Nov 22, 2024 Moonstone Sleet, a newly identified North Korean APT group, is associated with targeted cyberattacks that blend espionage and financial motivations, employing advanced techniques such as spear-phishing and custom malware.