Author: DEFENDEDGE
-
Targeted AnyDesk Ads on Google Served Up Weaponized App
Malicious ad campaign was able to rank higher in searches than legitimate AnyDesk ads. Read more
-
Microsoft Announces New Campaign from NOBELIUM
Original release date: May 27, 2021 The Microsoft Threat Intelligence Center (MSTIC) has released information on the uncovering of a widespread malicious email campaign undertaken by the activity group that Microsoft tracks as NOBELIUM. NOBELIUM was initially identified in November 2020, during an intrusion at a major cybersecurity organization. Microsoft security researchers identify NOBELIUM as the actor… Read more
-
Updates to Alert on Pulse Connect Secure
Original release date: May 27, 2021 CISA has updated Alert AA21-110A: Exploitation of Pulse Connect Secure Vulnerabilities to include new threat actor techniques, tactics, and procedures (TTPs), indicators of compromise (IOCs), and updated mitigations. CISA encourages users and administrators to review AA21-110A and the following resources for more information: • Re-Checking Your Pulse • … Read more
-
Biden’s Cybersecurity Executive Order Puts Emphasis on the Wrong Issues
David Wolpoff, CTO at Randori, argues that the call for rapid cloud transition Is a dangerous proposition: “Mistakes will be made, creating opportunities for our adversaries. Read more
-
Working Remotely: Preventing Disaster
Working Remotely: Preventing Disaster Following the start of the COVID-19 pandemic, working remotely has become increasingly popular in many organizations. A policy that was once meant to be only temporary, has been taking rapid steps towards permanence due to the promotion of increased productivity and an improved work-life balance. While this has many benefits for the organization and employees,… Read more
-
A Peek Inside the Underground Ransomware Economy
Threat hunters weigh in on how the business of ransomware, the complex relationships between cybercriminals, and how they work together and hawk their wares on the Dark Web. Read more
-
PDF Feature ‘Certified’ Widely Vulnerable to Attack
Researchers found flaws most of the ‘popular’ PDF applications tested. Read more
-
VMware Sounds Ransomware Alarm Over Critical Severity Bug
VMware’s virtualization management platform, vCenter Server, has a critical severity bug the company is urging customers to patch “as soon as possible”. Read more
-
Trend Micro Bugs Threaten Home Network Security
The security vendor’s network management and threat protection station can open the door to code execution, DoS and potential PC takeovers. Read more
-
Combatting Insider Threats with Keyboard Security
Dale Ludwig, business development manager at Cherry Americas, discusses advances in hardware-based security that can enhance modern cyber-defenses. Read more