Ransomware review: June 2023

Categories: Ransomware Categories: Threat Intelligence May saw a record number of 556 reported ransomware victims, the unusual emergence of Italy and Russia as major targets, and a significant rise in attacks on the education sector. (Read more…) The post Ransomware… Read more → The post Ransomware review: June 2023 first appeared on IT Security News.
https://www.itsecuritynews.info/ransomware-review-june-2023/?utm_source=dlvr.it&utm_medium=blogger

How to Improve Your API Security Posture

APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data. However, this level of connectivity doesn't come without major risks. Hackers can exploit vulnerabilities in APIs to gain unauthorized access to sensitive data or even take control of the entire system. Therefore, it's essential to have a robust API security posture to
https://thehackernews.com/2023/06/how-to-improve-your-api-security-posture.html?utm_source=dlvr.it&utm_medium=blogger

20 cybersecurity projects on GitHub you should check out

Open-source GitHub cybersecurity projects, developed and maintained by dedicated contributors, provide valuable tools, frameworks, and resources to enhance security practices. From vulnerability scanning and network monitoring to encryption and incident response, the following collection encompasses a diverse range of projects… Read more → The post 20 cybersecurity projects on GitHub you should check out first appeared on IT Security News.
https://www.itsecuritynews.info/20-cybersecurity-projects-on-github-you-should-check-out/?utm_source=dlvr.it&utm_medium=blogger

‘Triangulation’ Malware- New Tool to Find iPhones & iOS Devices Infection

Kaspersky reported earlier this month that they have discovered a new Zero-click iOS exploit currently being exploited by threat actors. The exploitation involves using iMessage as the delivery channel to gain root privileges.  Threat actors were using Command and Control (C2) servers to manage and control the compromised iOS devices. Recent reports suggest that a […] The post ‘Triangulation’ Malware- New Tool to Find iPhones & iOS Devices Infection appeared first on Cyber Security News.
https://cybersecuritynews.com/triangle-check/?utm_source=dlvr.it&utm_medium=blogger

The Annual Report: 2024 Plans and Priorities for SaaS Security

Over 55% of security executives report that they have experienced a SaaS security incident in the past two years — ranging from data leaks and data breaches to SaaS ransomware and malicious apps (as seen in figures 1 and 2). Figure 1. How many organizations have experienced a SaaS security incident within the past two years The SaaS Security Survey Report: Plans and Priorities for 2024,
https://thehackernews.com/2023/06/the-annual-report-2024-plans-and.html?utm_source=dlvr.it&utm_medium=blogger

10 Best SIEM Tools for SOC Operations – 2023

SIEM is now a fundamental security component of modern enterprises. The major reason is that each customer or tracker creates a virtual footprint in the log data of a network. SIEM systems leverage these log data to get knowledge into past incidents and events. A SIEM system not only determines that an attack has occurred […] The post 10 Best SIEM Tools for SOC Operations – 2023 appeared first on Cyber Security News.
https://cybersecuritynews.com/best-siem-tools/?utm_source=dlvr.it&utm_medium=blogger

Kimsuky APT poses as journalists and broadcast writers in its attacks

North Korea-linked APT group Kimsuky is posing as journalists to gather intelligence, a joint advisory from NSA and FBI warns. A joint advisory from the FBI, the U.S. Department of State, the National Security Agency (NSA), South Korea’s National Intelligence Service… Read more → The post Kimsuky APT poses as journalists and broadcast writers in its attacks first appeared on IT Security News.
https://www.itsecuritynews.info/kimsuky-apt-poses-as-journalists-and-broadcast-writers-in-its-attacks/?utm_source=dlvr.it&utm_medium=blogger

Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering

The Chinese nation-state group known as Camaro Dragon has been linked to yet another backdoor that's designed to meet its intelligence-gathering goals. Israeli cybersecurity firm Check Point, which dubbed the Go-based malware TinyNote, said it functions as a first-stage payload capable of "basic machine enumeration and command execution via PowerShell or Goroutines." What the malware lacks in
https://thehackernews.com/2023/06/camaro-dragon-strikes-with-new-tinynote.html?utm_source=dlvr.it&utm_medium=blogger

How defense contractors can move from cybersecurity to cyber resilience

As the world’s most powerful military and economic power, the United States also holds another, less impressive distinction: Cyber threat actors target the US more than any other country in the world. In 2022 alone, the FBI received more than… Read more → The post How defense contractors can move from cybersecurity to cyber resilience first appeared on IT Security News.
https://www.itsecuritynews.info/how-defense-contractors-can-move-from-cybersecurity-to-cyber-resilience/?utm_source=dlvr.it&utm_medium=blogger

RomCom RAT Using Deceptive Web of Rogue Software Sites for Covert Attacks

The threat actors behind RomCom RAT are leveraging a network of fake websites advertising rogue versions of popular software at least since July 2022 to infiltrate targets. Cybersecurity firm Trend Micro is tracking the activity cluster under the name Void Rabisu, which is also known as Tropical Scorpius (Unit 42) and UNC2596 (Mandiant). "These lure sites are most likely only meant for a small
https://thehackernews.com/2023/05/romcom-rat-using-deceptive-web-of-rogue.html?utm_source=dlvr.it&utm_medium=blogger