A new phishing kit named CryptoChameleon is being used to target Federal Communications Commission (FCC) employees, using specially crafted single sign-on (SSO) pages for Okta that appear remarkably similar to the originals. […]
In the vast digital landscape, data breaches have become an unfortunate reality. However, some breaches stand out as monumental, and the recent discovery of the “mother of all breaches” (MOAB) is one such instance. Let’s delve into the details of this massive security incident and explore its implic…
Automattic, the parent company of websites like WordPress and Tumblr, is in negotiations to sell training-related content from its platforms to AI firms like MidJourney and OpenAI. Additionally, Automattic is trying to reassure users that they can opt-out at any time, even if the specifics of the ag…
Microsoft patched a high-severity Windows Kernel privilege escalation vulnerability in February, six months after being informed that the flaw was being exploited as a zero-day. […]
Jack Teixeira, the Massachusetts Air National Guard member accused of leaking highly classified military documents on a social media platform, is expected to plead guilty in his federal case, according to court papers filed Thursday. Prosecutors asked the judge to schedule a change of plea hearing,…
Some doorbell cameras sold by Amazon and other online retailers have security flaws that could allow bad actors to view footage from the devices or control them completely, according to an investigation published Thursday by Consumer Reports. Researchers from the product-review organization said the…
A U.S. judge has ordered NSO Group to hand over its source code for Pegasus and other products to Meta as part of the social media giant’s ongoing litigation against the Israeli spyware vendor.
The decision, which marks a major legal victory for Meta, which filed the lawsuit in October 2019 for using its infrastructure to distribute the spyware to approximately
Lack of AI model visibility and security puts the software supply chain security problem on steroids.
AttackIQ has released a new assessment template in response to the recently published CISA Advisory (AA24-060A) which disseminates known Tactics, Techniques, and Procedures (TTPs) and Indicators of Compromise (IOCs) associated with the Phobos Ransomware variants observed as recently as February 2024.
The post Response to CISA Advisory (AA24-060A): #StopRansomware: Phobos Ransomware appeared…
A sophisticated threat actor using an MO similar to Scattered Spider is camouflaging itself with convincing impersonation techniques in targeted attacks.
Sekoia.io analysis describes updates to NoName057(16)’s Project DDoSia tooling: multi-architecture binaries (Windows, Linux, macOS, FreeBSD, ARM, x86) and a new encrypted POST-based C2 protocol that reports per-host metadata and a GUID derived from the Windows…
The better a security team works together, the bigger the direct impact on how well it can protect the organization.
This Wireshark tutorial guides the reader in exporting different packet capture objects. It builds on a foundation of malware traffic analysis skills.
The post Wireshark Tutorial: Exporting Objects From a Pcap appeared first on Unit 42….
Internal documents from I-Soon show the company focuses more on processing and analyzing stolen data than on developing novel exploits, delivering analyst-facing platforms that use deep learning to classify and extract intelligence. Their offensive toolset rel…
Convincing phishing emails, synthetic identities, and deepfakes all have been spotted in cyberattacks on the continent.