"The return of a malware menace and Five Eyes reiterates warning about Ivanti products."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 02 March 2024, 1413 UTC.

Content and Source:  https://feedly.com/i/subscription/feed%2Fhttps%3A%2F%2Fthecyberwire.com%2Ffeeds%2Frss.xml ("The Cyberwire").

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

The CyberWire

9K followers22 articles per week#security#ciso#tech

19

YESTERDAY

The return of a malware menace.

8h

This week we are joined by, Selena Larson from Proofpoint, who is discussing their research, "Bumblebee Buzzes Back in Black." Bumblebee is a sophisticated downloader used by multiple cybercriminal threat actors and was a favored payload from its first appearance in March 2022 through October 2023 before disappearing. After a four month hiatus, Proofpoint researchers found that the downloader retu

Ivanti VPN gateways may still be compromised after factory resets. NIST releases Cybersecurity Framework 2.0.

8h

Russia's APT29 targets cloud services. APT28 uses compromised Ubiquiti EdgeRouters. Suspected Iranian threat actor targets aerospace and defense entities.

WhatsApp's legal triumph cracks the spyware vault.

17h

A court orders NSO Group to hand over their source code. The Five Eyes reiterate warnings about Ivanti products. Researchers demonstrate a generative AI worm. Fulton County calls LockBit’s bluff. SMS codes went unprotected online. Golden Corral serves up a buffet of personal data. Ransom demands continue to climb. A US Senator calls on the FTC to investigate auto industry privacy practices. Dressi

Ivanti VPN gateways may still be compromised after factory resets. Change Healthcare confirms Blackcat/ALPHV ransomware attack.

21h

US indicts Iranian national for alleged cyberattacks against State and Treasury Departments.

FEB 29, 2024

Empowering women in cybersecurity through eSports: The Wicked6 Initiative.

1d

As we celebrate Women's History Month, we must also acknowledge and address the existing gender gap in cybersecurity. Despite significant technological advancements, only approximately one-fourth of all cybersecurity jobs worldwide were held by women in 2022. Getting women involved in cybersecurity requires a focused approach, including raising awareness, advocacy, education, mentoring, and active

The human element of cybersecurity: Why people are the ultimate defense.

1d

In the ever-evolving landscape of cybersecurity, there's a critical component that often gets overshadowed by the latest technology and sophisticated algorithms: the human element. One reason people tend to forget the human element in cybersecurity is the increasing reliance on and trust in advanced technologies. As artificial intelligence (AI) and machine learning (ML) become more sophisticated,

We belong: Q&A with Miriam Saffer: Creative, pragmatic, and resilient.

1d

Each month, N2K shares our commitment to workplace diversity, equity, inclusion, and belonging by featuring a representative female voice to shine a light on the answers to the tough questions we all need to ask to make sure each and every one of us is seen, heard, and belongs. Chris Hare: Can you please introduce yourself, Miriam? Tell us a bit about who you are and what your connection is to the

Creating Connections: Embracing change.

1d

It's getting to be that time of year when I am ready for change. Winter into spring, flowers starting to push through, longer days. My favorite time of year. I love the celebrations that happen now as well. It's exciting that we are coming upon International Women's Day and Women's History Month. We are bringing some changes here to Creating Connections as well. We are expanding our focus a bit to

Iran's cyber quest in Middle Eastern aerospace.

1d

Iran-Linked Cyber-Espionage Targets Middle East's Aerospace and Defense. SpaceX is accused of limiting satellite internet for US troops. Savvy Seahorse' Floods the Net with Investment Scams. GUloader Malware draws on a crafty graphic attack vector. Repo confusion attacks persist. European consumer groups question Meta’s data collection options. Allegations of Russia targeting civilian critical inf

Biden administration set to crack down on US data flows to China and Russia.

Biden restricts data transfers to China

•

1d

Florida passes a new bill banning children under sixteen from using social media platforms.

Joint cybersecurity advisory on Phobos ransomware.

CISA, FBI warn Phobos ransomware

•

1d

Comprehensive guide on mitigating Phobos ransomware threats, issued by the FBI, CISA, and MS-ISAC. This advisory unpacks the tactics, techniques, and procedures (TTPs) of the Phobos ransomware, operating under a Ransomware-as-a-Service (RaaS) model, targeting critical infrastructures since May 2019. Learn about effective strategies to secure RDP ports, remediate vulnerabilities, and implement EDR

Suspected Iranian threat actor targets aerospace and defense entities.

1d

Repo confusion campaign spreading on GitHub. AI models deliver backdoor.