Cyberpills.news
Malfunctions at Israel's largest refinery: grappling with potential cyberattacksCybersecurity and the oil industry: scenarios and reflections on the Bazan Group caseIsrael's largest oil refinery, Bazan Group, has encountered problems with its computer system that have raised suspicions of a possible cyber-attack. The national security agency Shin Bet is investigating the case, despite Bazan Group's assurances that its operations have not been disrupted. The incident...
Ransomware Abyss Locker and the assault on VMware ESXi servers: analysis and preventive actionsEscalation of targeted and customized attacks puts Linux and VMware ESXi users at riskThe article is about a variant of ransomware called Abyss Locker, now attacking VMware ESXi servers on Linux. This ransomware shares similarities with Ragnar Locker, being able to encrypt particular file extensions. The article emphasizes the importance of implementing security measures, keeping up to...
SUBMARINE backdoor: the new and disturbing threat to computer securityHow hackers use open source to break into corporate systemsThe piece talks about a new, sophisticated hacker attack called "SUBMARINE backdoor". This leverages open source tools to penetrate corporate networks, creating hidden passageways to steal sensitive data. The article highlights the importance for businesses to strengthen their defenses and stay up-to-date...
Ransomware: when video game cheats become a threatCryptocurrency scams and fake video game cheatsThe article highlights a recent cybersecurity discovery: a ransomware disguised as a cheat for the Call of Duty: Modern Warfare 2 video game. The malware is activated when the user downloads and installs the fake cheat, encrypting files and asking for a ransom for their recovery. To avoid such threats,...
Phishing and cryptocurrency fraud in fake government emailsSpoofing techniques and guidelines to protect yourself from these scamsThe article deals with phishing attacks via emails that appear to come from Italian government agencies, which are actually used to scam users by stealing cryptocurrencies. The deception uses a technique called "spoofing". The article stresses the importance of being careful when handling emails and...
CherryBlossom: a new Android malware among usAndroid CherryBlossom malware modus operandi and digital security tipsCherryBlossom Android malware can steal various sensitive data from smartphones, posing a danger to users' safety. The malware is activated through pre-installed infected applications and can evade security software. Apart from data theft, it can install further malware. Experts recommend installing...
IcedID strengthens its capabilities: new methods of dissemination and attackThe malware sharpens its claws. It's hard to detectThe malware loader IcedID has updated its BackConnect module, making it harder to detect by shifting its traffic. The number of command-and-control servers has also increased and IcedID may be utilizing victims for spamming operations, amplifying the damage caused.
SEC: reactions to new cyber incident disclosure rulesChallenges and opportunities: expert comments on the new SEC guidelinesThe US Securities and Exchange Commission (SEC) has introduced guidelines requiring companies to disclose cyber incidents within four business days. The new regulation has sparked a debate among cybersecurity experts. While some voices are voicing concerns about privacy and information accuracy, others...
Generative artificial intelligence and enterprise security threatsBalance between innovation and security: the implications of generative artificial intelligenceThe article discusses the potential risks of generative AI for corporate security, such as the creation of false images or realistic texts used for fraud. However, he points out that there are methods of protection, such as strong encryption and the adoption of strict security protocols. Despite the...
Introduction to TIM's TelsySkills training platformAnalysis of TelsySkills: TIM's online threat awareness initiativeTIM has launched TelsySkills, an e-learning platform to promote online safety, which includes topics such as phishing, cyberbullying, privacy and password security. The platform is intuitive, interactive and issues certificates of participation. This initiative helps create a safer web.
Ubuntu: nearly half of users are vulnerable to new cyberthreatThe critical Ubuntu vulnerability: emerging threat clarifications and tips for proper security managementRecent research highlights a significant risk to Ubuntu users due to new vulnerabilities, which allow elevation of privilege in the system. On these critical issues, the Ubuntu developers have responded promptly by releasing security updates. To ensure effective protection, it is imperative that users...
The Mirai botnet attack on Apache Tomcat serversUnmasking the cyberattack chain: infiltration, execution, and countermeasuresThe article discusses a cyberattack campaign targeted towards poorly protected Apache Tomcat servers, aiming to distribute Mirai botnet malware and cryptocurrency miners. The attack involves the use of a web shell script known as "neww", which gains unauthorized access to make changes on the server....
Clash of giants: the Guarantor blocks Threads, the new Meta social networkThe Meta Group runs into the networks of the Irish data protection supervisor: Threads in stand-byThe launch of the Threads app by Meta, the former Facebook, defined as "the anti Twitter", has been slowed down due to problems related to privacy and the use of personal data. Ireland's data protection supervisory authority (DPC) has raised these objections, given that Meta should have notified them...
Overseeing operational technology: safety in industrial control systemsDeciphering threats to operational technology and industrial control systems: an in-depth explorationThe article focuses on safety in industrial control systems (ICS) and operational technologies (OT). Due to the increase in cyber attacks, it is essential to protect this infrastructure, which is crucial in sectors such as energy, water and gas. Threats to these systems can have serious repercussions,...
Microsoft innovates in IoT security: firmware analysis service previewA sneak peek at the Microsoft Defender firmware analysis service previewMicrosoft has launched a preview of a firmware analysis service for Defender for IoT. This service helps identify, prioritize, and respond to security risks in IoT devices. Microsoft intends to further improve the service and integrate it with Azure Defender to provide a unified security system that...
SQL injection: from understanding to preventionUnderstand, address and prevent cyber attacks via SQL injectionThe article highlights the risks of SQL injection, a hacker attack that feeds on vulnerabilities in web applications to manipulate or steal system data. Despite existing defensive strategies, SQL injection remains a major threat. To counteract this, the article recommends precautions such as the use...
FraudGPT: a new malicious chatbot emergesThin lines of code: from mimicking human speech to online security threatsThe article talks about FraudGPT, a malicious chatbot that replicates human speech by convincing users to reveal personal information. Emphasize the importance of online safety and digital literacy in countering these threats. Finally, it invites you to be constantly updated on new threats and ways to...
The founder of the Russian cybersecurity company ChronoPay sentencedSeries of frauds and DDoS attacks: the top of the russian cybersecurity in the dockPavel Vrublevsky, founder of Russian cybersecurity company ChronoPay, has been sentenced to 14 years in prison for crimes of fraud and organized criminal activity. In 2010, he orchestrated a DDoS attack that disrupted air traffic in southern Russia. Despite his conviction, investigations continue into...
Mallox ransomware alert: significant risks to unprotected MS SQL serversDeciphering the attack mechanism of Mallox malwareThe article warns of the rise of Mallox ransomware, which attacks unprotected Microsoft SQL servers using brute force techniques. The malware encrypts data and demands a ransom for the decryption key. To counter these attacks, the article suggests strengthening server security, changing passwords frequently,...
Cyber defense strategies for the security of energy infrastructuresProtection methods and collaborative strategies: the new front of cyber security in the energy sectorThe article discusses the importance of cyber security in energy infrastructure, in response to the growing threat of cyber attacks. We talk about the main risks, including malware and ransomware, and underline the need for proactive protection through constant analysis of attack techniques, staff education...
IT security: reflections on the cost of data breaches and preventive measuresEffective strategies and technological innovation to reduce the impact of data breachesIn the digitized world, data security is paramount. According to IBM, the average cost of a data breach in 2021 rose to $4.24 million. These costs can be reduced with incident response plans, use of artificial intelligence, and staff training.
Security emergency: experts warn of MikroTik router riskExploitation of the Chimay Red exploit and protective measures for MikroTik usersCybersecurity experts have discovered a serious vulnerability in MikroTik routers that could affect up to 900,000 devices worldwide. The "Chimay Red" exploit allows remote installation of malicious software. MikroTik has released a fix tool, however many out-of-date devices remain at risk. Users are...
BlackCat: the ransomware that hits ItalyThe operating mechanism and preventive strategies for the new cyber danger have been revealedItaly has been hit by a major ransomware attack called 'BlackCat', which encrypts user data making it inaccessible and requires payment for its decryption. This attack caused significant losses to many companies. It is imperative to prevent such attacks with constant system updates, the use of robust...
Thales advances in the IT security sectorHow the acquisition of Imperva strengthens the position of ThalesThales, the French technology company, has acquired Imperva, a Silicon Valley cybersecurity firm, for $3.6 billion. The operation strengthens Thales' presence in the digital security sector, integrating Imperva's protection systems into its offer.
ZenBleed: a new dilemma for owners of AMD processorsTechnical analysis of the ZenBleed vulnerability in AMD processors and proposed mitigation measuresResearchers have identified a new vulnerability, called ZenBleed, which affects AMD processors of the Ryzen and Epyc series. This vulnerability can expose sensitive data between various processor cores. AMD is now working on a microcode update to limit its expansion.
Google Ads: unwitting vehicle for spreading malwareTrojans Glupteba and Vidar target via Google AdsGoogle ads have been used by cybercriminals to spread malware, most notably the Glupteba and Vidar trojans. These trojans get installed on users' systems when they click on fake advertisements. This underlines the importance of strengthening cyber security.
Zero-day bug: Ivanti's action in fixing MobileIronIvanti's readiness to respond to MobileIron vulnerability: the importance of security updatesMobileIron software, used by many large corporations and government organizations, recently fell victim to a hacker attack due to a "remote code execution" vulnerability. This vulnerability allowed hackers to execute malicious code remotely, compromising system security. Ivanti, the parent company of...
Norwegian government networks affected by DDoS attack: incident analysisNorwegian cyber security under attack: the importance of defense against DDoS threatsThe article discusses a recent DDoS attack on twelve Norwegian government sites that disrupted several key services. The Cyber Security Center of Norway has launched an investigation to identify the perpetrators. The incident underscores the importance of global cybersecurity measures.
Citrix in the crosshairs: IT security on alert for a zero-day attackCritical infrastructure compromise: understanding and addressing the impact of zero-day vulnerability on CitrixNetwork and cloud services provider Citrix has been hit by a very serious zero-day vulnerability. Tens of thousands of Citrix servers have been compromised, putting vast sensitive data and related infrastructure at risk. In response, emergency patches were released and the importance of risk management...
Critical vulnerabilities discovered in Windows ATERA: an invitation to updateComplexity, security and proactive measures in the modern IT landscapeThe ATERA remote monitoring service for Windows has recently been affected by critical vulnerabilities that could allow cybercriminals to access sensitive data. Experts recommend an immediate system update to protect your data. The situation highlights the importance of a proactive approach to security...
HotRat: the insidious danger hidden in non-original softwareUnauthorized remote access to your device through pirated softwareThe article deals with the HotRat malware, a trojan hidden in cracked software. HotRat is capable of bypassing security protocols, allows remote access to your device and can steal sensitive information. It prevents infestation by avoiding downloading cracked software and keeping antivirus software up...
Rome focuses on cybersecurity: a new course for future expertsInnovation and training for cyber securityRome is launching an advanced cyber security course in collaboration with the Postal Police, which will cover topics such as cyber risk management, prevention and response to cyber incidents. With the rise of cyber threats, cybersecurity education offers ample career opportunities.
Windows 11 phishing protection gets strongerImproved security and new features: how Microsoft fights online threatsMicrosoft has increased the phishing protection of Windows 11 with two new features. The former automatically blocks access to phishing websites, while the latter allows users to manually report such suspicious sites. These additions contribute to greater online security.
Clop: new increase in criminal activity on the dark webRecent developments in the group's tactics: infiltration, extortion and prevention strategiesThe article concerns the intensification of the activities of the Clop criminal group, known for its cyber extortion attacks. Recently, this group targeted Ipswitch's MOVEit system, a tool for securely exchanging sensitive data. Their method involves a "double extortion", that is, they demand a ransom...
Strengthening the security of BGP: a priority for the IT worldAnalysis of issues related to Border Gateway Protocol (BGP) security and possible solutionsThe article examines the vulnerabilities of the Border Gateway Protocol (BGP), a crucial routing protocol for the Internet, which will be discussed at the upcoming Black Hat conference. Since the weaknesses of BGP could be exploited to compromise data traffic, enhancing the security of BGP with mechanisms...
The security of smart devices: the american Cyber Trust Mark initiativeDevelopments and implications of the new US cybersecurity brandThe US administration has introduced the "Cyber Trust Mark", a mark that certifies the cyber security of digital devices and services. This symbol, visible to consumers, indicates that the product meets government safety standards. Despite potential implementation challenges, this seal promises to increase...
The security of the CoWin portal in the eye of the storm: investigations in progressImplications for the vaccination program following the alleged data breachThe security incident on the CoWin portal, a key tool for India's vaccination programme, is under investigation. Although user data has been exposed, Minister of Information and Technology, Rajeev Chandrasekhar, assures that there is no evidence of data compromise. This matter is being handled by CERT-In,...
Privacy challenge: the impact of the UK's Online Safety Bill on Apple policiesThe Apple dilemma in the UK: user privacy Vs digital security lawsThe UK has revised its digital security law, forcing companies to make user communications accessible for investigation, putting encrypted services like iMessage and Apple's FaceTime at risk. If Apple were to relinquish, it could be forced to downsize or eliminate those services, impacting user trust...
NATO Cyber Defense: from Vilnius to future cyber scenariosChallenges and responses to the growing cyber threat: NATO's engagement in the cyber domainThe article highlights the importance of cyber defense for the security of NATO member nations. Discusses the evolution of cyber security, the effect of NATO's 2016 Cyber Defense Pledge and the ongoing need to improve and adapt to online threats. The future of cyber defense will be a key theme of NATO's...
PokerStars security breach: over 110,000 user data exposedDetails of the PokerStars hack and advice from IT security expertsPopular online poker site, PokerStars, fell victim to a massive hack that exposed the data of more than 110,000 users, including credentials such as usernames and passwords. IT security experts recommend changing passwords immediately and using two-factor authentication.
Regulatory framework and personal data protection: reflections and developmentsEDPB considerations on the Data Privacy Framework: strengths and areas for improvementThe Data Privacy Framework, created to protect personal data, has received approval from the European Data Protection Board (EDPB), which however required further clarification. The EDPB raised issues regarding 'data minimisation', 'purpose limitation' and the risk assessment approach. Despite the critical...
Zyxel on alert: DDoS botnet attacks on devices are on the riseDisturbing infiltration of DDoS botnets on Zyxel devices revealed: here are countermeasures and security tipsDDoS botnet attacks are on the rise, specifically targeting Zyxel devices. Hackers exploit a firmware bug to control devices and use them in DDoS attacks. Zyxel is releasing firmware updates to correct the problem, but users are advised to be vigilant.
How the Lazarus group is leveraging GitHub for targeted attacksCyber security: Lazarus group aims to compromise developers on GitHubThe North Korean hacker group, Lazarus, is targeting developers on GitHub with malicious projects. Hackers use GitHub and social networks to pitch legitimate-looking software development projects that contain malicious code. Developers need to source the projects they use, use antivirus software, and...
Kevin Mitnick: the rise, fall and rebirth of a hacking iconFrom shadow to light: the life and legacy of Kevin Mitnick on the world of cyber securityThe article chronicles the life and contributions of Kevin Mitnick, a well-known hacker and key figure in the field of information security, who died at the age of 59. Mitnick, who was arrested for hacking in the early 1980s, has since become a respected cybersecurity consultant after prison. His figure...
Operation intrusion: North Korea targets crypto firmsRevealed how North Korean attackers bypassed JumpCloud securityCyberseason's report revealed a cyber attack on JumpCloud, a digital identity management platform, carried out by hackers linked to North Korea. They exploited the JumpCloud vulnerability to attack cryptocurrency companies, using phishing techniques and a piece of malware called "RokRat". JumpCloud responded...
Digital security in Italy: analysis of the Censis-IISFA reportCybersecurity: implications, training and strategies for the future according to the Censis-IISFA reportThe Censis-IISFA report in the Senate highlights the importance of a proactive approach to information security, underlining its economic and social implications. It suggests investments in training and research, implementation of data protection rules and collaboration between public and private...
Zero-day bug found in Netscaler and Gateway productsHow the zero-day bug can compromise our systemsThe article highlights a zero-day bug discovered in Netscaler ADC and Gateway products that could allow unauthorized access to corporate systems. Suppliers are working to fix the problem. Highlight the importance of cybersecurity awareness in an increasingly digitized world.
Artificial intelligence: key factor for the future of US DefenseOn the Artificial Intelligence front: domains, definitions and decisions of the US DefenseThe article explores the impact of Artificial Intelligence (AI) in the military and political fields. It highlights the opportunities offered by AI in automating battlefields and managing vast amounts of data for informed policy decisions, while highlighting the ethical and moral issues involved.
Impact of new russian technology regulation: iPhones prematurely ejectedDigital sovereignty vs. globalization: the effects of the iPhone ban in RussiaApple's iPhone was recently banned in Russia due to concerns about cyber security and compliance with privacy regulations. This decision, which has generated controversy, has led to a debate on the balance between national security and technological globalization.
Challenging cybersecurity: the audacity of SophosEncrypt ransomwareChallenge to the last bit: the tech community mobilizes against the threat of SophosEncryptSophosEncrypt is a ransomware that mocks security experts with its advanced attack techniques. Encrypts host files and destroys the originals, before renaming them. It uses the RSA algorithm and can process up to four threads simultaneously, making data encryption very fast. Security experts already...