Tags → #stories

Cybersecurity Threat: Earth Estries Group Identified

Earth Estries, also known as Salt Typhoon, is a high-level cyber threat actor that has been active since at least 2020, employing various tactics and tools to exploit system vulnerabilities, particularly targeting Microsoft Exchange servers.
Cybersecurity Threats Targeting Developers Identified in New Campaign

The Contagious Interview campaign has been identified as a significant cybersecurity threat targeting developers, particularly in the web, cryptocurrency, and AI sectors, employing deceptive job postings and malicious code to compromise victims.
Generative AI Framework Aims to Streamline Security Control Development

Recent advancements in Generative AI may significantly reduce the time required to develop security controls for cloud-based services, potentially streamlining the process to under one minute while maintaining quality and reliability.
Increase in CosmicBeetle Ransomware Group Activity Observed in 2023

CosmicBeetle, a ransomware group active since 2020, has increased its targeting of small to medium-sized enterprises in 2023 by exploiting outdated software and critical vulnerabilities.
KillSec Increases Ransomware and Data Breach Activities

KillSec, a cyber threat actor that emerged in October 2023, has intensified its ransomware and data breach activities, targeting various sectors including finance and healthcare.
Androxgh0st Botnet Targets Web Servers and IoT Devices

CloudSEK's Threat Research team has reported that the Androxgh0st botnet, active since January 2024, is targeting web servers and exploiting various vulnerabilities to gain unauthorized access.
Fastly Experiences BGP Hijack Incident

Fastly recently experienced a BGP hijack incident, which, unlike a similar event in 2008 that caused significant disruption, had minimal impact due to the implementation of Resource Public Key Infrastructure (RPKI).
New Malware Campaign 'Hidden Risk' Targets Cryptocurrency Businesses

SentinelLabs has reported a new multi-stage malware campaign named 'Hidden Risk', linked to a suspected North Korean threat actor targeting cryptocurrency businesses through phishing emails and disguised malware.
NIST Advances Fourteen Post-Quantum Signature Schemes

On October 24, 2024, NIST announced the advancement of fourteen post-quantum signature schemes to the second round of its competition aimed at standardizing algorithms to protect against potential quantum computer attacks.
New Malware Winos4.0 Targets Windows Users in Gaming, Education

A new malware strain called Winos4.0 has been identified as targeting Microsoft Windows users, particularly affecting gaming and educational applications.