Tags → #cybersecurity

Passkeys Proposed as Alternative to Traditional Passwords

Passkeys, proposed as a modern alternative to traditional passwords, aim to enhance online security through public key cryptography while addressing usability challenges for widespread adoption.
Survey Examines AI Adoption in Cybersecurity Industry

HackerOne and the SANS Institute conducted a survey revealing that 66% of cybersecurity professionals are using AI technologies, with many acknowledging its benefits in threat detection and incident response, while also expressing concerns about ethical implications and potential risks.
Volexity Identifies Vulnerability in Fortinet's FortiClient VPN

In July 2024, Volexity discovered a vulnerability in Fortinet's FortiClient VPN that allows user credentials to persist in memory, which has been exploited by the threat actor BrazenBamboo using their DEEPDATA malware.
How to Automate Malware Analysis and Unpack Obfuscated Samples with x64dbg

A recent video by MalwareAnalysisForHedgehogs demonstration highlights the capabilities of x64dbg in unpacking a complex 4-stage malware sample, showcasing various techniques and tools used in malware analysis.
Analysis of WezRat Malware Attributed to Iranian Group

Check Point Research has analyzed WezRat, a modular infostealer attributed to the Iranian cyber group Emennet Pasargad, which has been linked to various cyber operations and distributed through phishing emails targeting Israeli organizations.
Concerns Raised Over Security of Major Web Browsers

Recent analyses have highlighted security concerns regarding the handling of sensitive data in major web browsers, revealing vulnerabilities that may allow local attackers to access information retained in memory.
EPA Report Identifies Cybersecurity Vulnerabilities in Water Systems

A report from the EPA's Office of Inspector General has identified significant cybersecurity vulnerabilities in 97 drinking water systems, potentially affecting 26.6 million Americans and highlighting the need for urgent action to enhance security measures.
Google Enhances Memory Safety with New Coding Practices

Google is implementing a comprehensive strategy to enhance memory safety by addressing spatial memory safety vulnerabilities through the adoption of Safe Coding practices and the introduction of hardened libc++.
Malware Detection Market Sees Innovations in Loader Technology

The malware detection market is rapidly innovating in response to the evolving tactics of cybercriminals, particularly with the use of loaders like BabbleLoader, which employ advanced evasion techniques to deliver malicious payloads.
Cadet Blizzard Cyber Group Targets Ukraine and NATO Entities

Cadet Blizzard, a cyber threat group associated with the Russian military intelligence agency GRU, has resumed operations with a renewed focus on targeting Ukraine and NATO member states.