DarkReading.com

"GitHub attack vector cracks open google, microsoft, AWS projects."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 15 August 2024, 0231 UTC.

Content and Source:  https://www.darkreading.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 

Dark Reading

154K followers49 articles per week#security#tech

24

Most popular

GitHub Attack Vector Cracks Open Google, Microsoft, AWS Projects

by Elizabeth Montalbano, Contributing Writer / 9h

Cloud services and thus millions of end users who access them could have been affected by the poisoning of artifacts in the development workflow of open source projects.

'EastWind' Cyber-Spy Campaign Combines Various Chinese APT Tools

10 TTPs

•

by Jai Vijayan, Contributing Writer / 5h

•

Chinese hackers target Russian systems

The likely China-linked campaign is deploying CloudSorcerer and other proprietary binaries belonging to known state-sponsored groups, showing how advanced persistent threat groups often collaborate with each other.

Cybersecurity's Real Challenge Is Communication, Not Just Technology

by Thomas Kinsella / 12h

By nurturing a security-centric work culture that involves everybody, organizations can overcome challenges with greater agility and confidence.

Today

Ransomware Group Behind Major Indonesian Attack Wears Many Masks

3 TTPs

•

by Nate Nelson, Contributing Writer / 2h

Brain Cipher made a loud entry to the ransomware scene, but it doesn't seem to be quite as sophisticated as its accomplishment would suggest.

NIST Releases 3 Post-Quantum Standards, Urges Orgs to Start PQC Journey

NIST announces post-quantum cryptography standards

•

by Jeffrey Schwartz, Contributing Writer / 4h

Security experts welcomed the long-anticipated publication of the first post-quantum cryptographic standards as a significant milestone.

New ISAGCA Report Explores Zero-Trust Outcomes in OT Cybersecurity

6h

[no content]

Mimecast Announces Acquisition of Aware, Doubles Down on AI-Powered Human Risk Management Capabilities

Mimecast acquires Aware cybersecurity startup

•

7h

[no content]

DigiCert to Acquire Vercara

DigiCert acquires Vercara for cybersecurity

•

7h

[no content]

Guardz Launches Free 'Community Shield' Plan to Empower MSPs

7h

[no content]

Gcore Radar Report Shows 46% Increase in Number of DDoS Attacks in First Half of 2024

DDoS attacks rise 46% in 2024

•

7h

[no content]

Zimperium Teams Up With Okta to Enhance Zero-Trust Identity Threat Protection With AI-Driven Mobile Security Solutions

7h

[no content]

Digital Align Inc. Achieves SOC 2 Type 2 Certification for Secure Automation Intelligence

7h

[no content]

Experian Acquires Behavioral Analytics Company NeuroID

Experian acquires NeuroID for analytics

•

8h

[no content]

UK Royal Family, Prime Minister Deepfakes Make Rounds on Meta

AI deepfakes used in crypto scams

•

by Dark Reading Staff / 8h

According to the researchers, roughly 250 fake advertisements appeared on platforms like Facebook and Instagram, and some are reportedly still up and running.

Cybercriminal Leader 'J.P.Morgan' Busted for Pioneering RaaS Model

Maksim Silnikau extradited for cybercrime

•

by Dark Reading Staff / 12h

Maksim Silnikau and his associates are accused of developing and distributing notorious ransomware strains such as Reveton and Ransom Cartel, among other criminal acts.

It's Time to Promote Security Talent From Within

15h

While there are smart people and good leaders in other fields, we need to cultivate and grow leaders from the existing cybersecurity workforce, too.

DNC Credentials Compromised by 'IntelFetch' Telegram Bot

by Nathan Eddy, Contributing Writer / 16h

The Democratic National Convention soon to take place in Chicago, already under heavy security, faces an additional threat in the form of stolen credentials for delegates.

Yesterday

Gold Mining Company Struck by Ransomware Attack

Evolution Mining hit by ransomware

•

by Dark Reading Staff / 1d

Australia's Evolution Mining said its IT systems were infected with ransomware in an Aug. 8 cyber incident.

Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update

7 TTPs

•

27by Jai Vijayan, Contributing Writer / 1d

•

PatchTuesday

Attackers are already actively exploiting six of the bugs and four others are public, including one for which Microsoft has no patch yet.

NIST Finalizes Post-Quantum Encryption Standards

NIST announces post-quantum cryptography standards

•

by Jennifer Lawinski, Contributing Writer / 1d

The new standards are designed for two tasks: general encryption and digital signatures.

Cybercriminal Duo Attracts FBI Notice by Spending Big & Living Large

WWH-Club admins arrested for fraud

•

by Dark Reading Staff / 1d

Cash may be king, but law enforcement keeps track of who spends it, especially when it's in the six-figure range.

Critical Ivanti vTM Bug Allows Unauthorized Admin Access

2 TTPs

•

by Nate Nelson, Contributing Writer / 1d

•

CVE-2024-7593

The CVSS 9.8 authentication bypass in Ivanti's traffic manager admin panel already has a proof-of-concept (PoC) exploit lurking in the wild.

Inc Ransomware Encryptor Contains Keys to Victim Data Recovery

McLaren Health Care IT disruption

•

by Nate Nelson, Contributing Writer / 1d

The threat group is disrupting healthcare organizations. Victims can help themselves, though, even after compromise, by being careful in the decryption process.

Microsoft Azure AI Health Bot Infected With Critical Vulnerabilities

Azure Health Bot vulnerabilities discovered

•

by Nathan Eddy, Contributing Writer / 1d

Privilege escalation flaws in the healthcare chatbot platform could have allowed unauthorized cross-tenant access and management of other customers’ resources.

FBI Shuts Down Dozens of Radar/Dispossessor Ransomware Servers

4 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 1d

•

FBI dismantles Radar Dispossessor ransomware

Computer infrastructure in the US, UK, and Germany associated with the cybercriminal group, which targeted SMBs using double extortion, is officially out of commission.

APT41 Spinoff Expands Chinese Actor's Scope Beyond Asia

9 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 1d

•

Earth Baku expands cyber operations

Earth Baku, yet another subgroup of the highly active and increasingly sophisticated collective, is moving into EMEA with new malware and living-off-the-land (LotL) tactics.

The Changing Expectations for Developers in an AI-Coding Future

28by Matias Madou / 1d

AI's proficiency at creating software code won't put developers out of a job, but the job will change to one focused on security, collaboration, and "mentoring" AI models.

DARPA Aims to Ditch C Code, Move to Rust

32by Robert Lemos, Contributing Writer / 1d

The Defense Advanced Research Projects Agency launches TRACTOR program to work with university and industry researchers on creating a translation system that can turn C code into secure, idiomatic Rust code.

End of feed