Tags → #cybersecurity

Threats
North Korea Identifies New Cyber Threat Group Moonstone Sleet
Nov 22, 2024 Moonstone Sleet, a newly identified North Korean APT group, is associated with targeted cyberattacks that blend espionage and financial motivations, employing advanced techniques such as spear-phishing and custom malware.
Tools
Novel Security Mechanism ACRIC Addresses Legacy System Vulnerabilities
Nov 22, 2024 The introduction of the Authenticated Cyclic Redundancy Integrity Check (ACRIC) aims to enhance security in legacy systems by providing a protocol-agnostic solution that maintains backward compatibility and minimizes transmission overhead.
Policy
Aeva Black Keynotes RustConf 2024 on Open Source Software
Nov 21, 2024 Aeva Black delivered the opening keynote at RustConf 2024, highlighting the importance of enhancing the security of open source software and discussing its significant economic impact.
Cybercrime
BlueSky Surpasses 20 Million Users Amid Rising Scam Concerns
Nov 21, 2024 BlueSky, a decentralized microblogging platform, has surpassed 20 million users but is facing challenges with an increase in cryptocurrency scams and fraudulent activities.
Tools
CNN Model Proposed for Cyberattack Detection in IoMT
Nov 21, 2024 A proposed Convolutional Neural Network (CNN) model aims to enhance cybersecurity in the Internet of Medical Things (IoMT) by achieving high accuracy in detecting cyberattacks, while also addressing challenges related to real-time performance and integration within healthcare networks.
Threats
Comparison of VenomRAT and AsyncRAT in Cybersecurity
Nov 21, 2024 Remote Access Tools (RATs), such as VenomRAT and AsyncRAT, are utilized by cyber attackers for unauthorized system control, with distinct differences in their capabilities and detection methods.
Vulnerabilities
Critical Local Privilege Escalation Vulnerabilities Found in Needrestart
Nov 21, 2024 The Qualys Threat Research Unit has identified five critical Local Privilege Escalation vulnerabilities in the needrestart component, which is installed by default on Ubuntu Server, allowing unprivileged users to gain root access without user interaction.
Vulnerabilities
CWE Releases Top 25 List of Software Vulnerabilities
Nov 21, 2024 The Common Weakness Enumeration (CWE) Top 25 list has been released, identifying critical software vulnerabilities that require attention from developers and security professionals.
Threats
Cyber-Espionage Campaign by TAG-110 Targets Multiple Regions
Nov 21, 2024 Insikt Group has reported the emergence of a cyber-espionage campaign attributed to TAG-110, which primarily targets organizations in Central Asia, East Asia, and Europe.
Threats
Cybersecurity Incident Involves LevelBlue's MDR Security Operations Center
Nov 21, 2024 A cybersecurity incident involving LevelBlue's Managed Detection and Response (MDR) Security Operations Center has underscored the importance of monitoring persistence mechanisms, following the detection of a potentially unwanted application that utilized suspicious registry keys and scheduled tasks.