Security Bundle

"CISA and Open SSF release framework for Package Repository Security."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 12 February 2024, 1323 UTC.

Content and Source:  https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895 ("Security Bundle").

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

16

MOST POPULAR

CISA and OpenSSF Release Framework for Package Repository Security

OpenSSF and CISA release package repository

•

39The Hacker News / 1h

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced that it's partnering with the Open Source Security Foundation (OpenSSF) Securing Software Repositories Working Group to publish a new framework to secure package repositories. Called the Principles for Package Repository Security, the framework aims to establish a set of foundational rules for package

ExpressVPN leaked DNS requests due to a bug in the split tunneling feature

ExpressVPN split tunneling bug leaked DNS requests

•

30Security Affairs / 2h

A bug in the split tunneling feature implemented in ExpressVPN exposed the domains visited by the users. ExpressVPN addressed a bug in the split tunneling feature that exposed the domains visited by the users to configured DNS servers. The company opted to temporarily remove the feature in the Windows app to address the issue. The bug will be enabled in a future release when the company will fix

Bugcrowd Raises $102 Million

Bugcrowd raises $102 million

•

SecurityWeek / 1h

Bugcrowd has raised $102 million in strategic growth funding, which it will use to accelerate growth and improve its platform. The post appeared first on SecurityWeek .

TODAY

Europe's largest caravan club admits wide array of personal data potentially accessed

The Register – Security / 30min

Experts also put an end to social media security updates The Caravan and Motorhome Club (CAMC) and the experts it drafted to help clean up the mess caused by a January cyberattack still can't figure out whether members' data was stolen.…

Ransomware attack forces 18 Romanian hospitals to go offline

Romanian hospitals hit by ransomware

•

BleepingComputer / 41min

At least 18 hospitals in Romania were knocked offline after a ransomware attack took down their healthcare management system. [...]

4 Ways Hackers use Social Engineering to Bypass MFA

2 TTPs

•

38The Hacker News / 1h

When it comes to access security, one recommendation stands out above the rest: multi-factor authentication (MFA). With passwords alone being simple work for hackers, MFA provides an essential layer of protection against breaches. However, it's important to remember that MFA isn't foolproof. It can be bypassed, and it often is. If a password is compromised, there are several options

China's Dogged Campaign to Portray Itself as Victim of US Hacking

Dark Reading / 2h

After the US and its allies formally accused China of irresponsible and malicious behavior in cyberspace back in 2021, the government there has been on a mission to cast the US in the same light.

Exploitation of Another Ivanti VPN Vulnerability Observed

SecurityWeek / 2h

Organizations urged to hunt for potential compromise as exploitation of a recent Ivanti enterprise VPN vulnerability begins. The post appeared first on SecurityWeek .

Warzone RAT Shut Down by Law Enforcement, Two Arrested

DOJ shuts down 'Warzone' malware vendor

•

SecurityWeek / 2h

Warzone RAT dismantled in international law enforcement operation that also involved arrests of suspects in Malta and Nigeria. The post appeared first on SecurityWeek .

Why Are Compromised Identities the Nightmare to IR Speed and Efficiency?

24The Hacker News / 2h

Incident response (IR) is a race against time. You engage your internal or external team because there's enough evidence that something bad is happening, but you’re still blind to the scope, the impact, and the root cause. The common set of IR tools and practices provides IR teams with the ability to discover malicious files and outbound network connections. However, the identity aspect - namely

Ongoing Azure Compromises Target Senior Execs, Microsoft 365 Apps

2 TTPs

•

Dark Reading / 3h

Attackers are breaching cloud environments and playing games with corporate Microsoft 365 apps, and further victims are likely to come.

YESTERDAY

9 Possible Ways Hackers Can Use Public Wi-Fi to Steal Your Sensitive Data

Security Affairs / 4h

Exploring the Risks: Unveiling 9 Potential Techniques Hackers Employ to Exploit Public Wi-Fi and Compromise Your Sensitive Data We’ve all used public Wi-Fi: it’s convenient, saves our data, and speeds up browsing. But while we enjoy its benefits, hackers do too. Here, we’ll explore how cybercriminals exploit public Wi-Fi to access your private data and possibly steal your identity. Plus, we’ll di

US Feds arrested two men involved in the Warzone RAT operation

IoC > 1 domain

•

Security Affairs / 4h

•

DOJ shuts down 'Warzone' malware vendor

The U.S. Justice Department (DoJ) seized the infrastructure that was used to sell the remote access trojan (RAT) Warzone RAT. The Justice Department announced the seizure of internet domains used to sell the remote access Trojan Warzone RAT (www.warzone[.]ws). The seizure is the result of an international law enforcement operation, federal authorities in Atlanta and Boston charged individuals in

Mon Dieu! Nearly half the French population have data nabbed in massive breach

2 TTPs

•

The Register – Security / 5h

PLUS: Juniper's support portal leaks customer info; Canada moves to ban Flipper Zero; Critical vulns Infosec In Brief Nearly half the citizens of France have had their data exposed in a massive security breach at two third-party healthcare payment servicers, the French data privacy watchdog disclosed last week.…

Microsoft Introduces Linux-Like 'sudo' Command to Windows 11

100+The Hacker News / 6h

Microsoft said it's introducing Sudo for Windows 11 as part of an early preview version to help users execute commands with administrator privileges. "Sudo for Windows is a new way for users to run elevated commands directly from an unelevated console session," Microsoft Product Manager Jordi Adoumie said. "It is an ergonomic and familiar solution for users who want to elevate a command

U.S. Offers $10 Million Bounty for Info Leading to Arrest of Hive Ransomware Leaders

2 TTPs

•

37The Hacker News / 8h

•

US offers $10M reward for Hive ransomware leaders

The U.S. Department of State has announced monetary rewards of up to $10 million for information about individuals holding key positions within the Hive ransomware operation. It is also giving away an additional $5 million for specifics that could lead to the arrest and/or conviction of any person "conspiring to participate in or attempting to participate in Hive ransomware activity."

END OF FEED