Latest Cybersecurity News and Articles

---

Navigating the Pandora’s Box that is ChatGPT: Insights from a Global CISO

Jonathan Fischbein is the Chief Information Security Officer for cyber security vendor Check Point Software. He has more than 25 years’ experience in high-tech security markets, shaping security strategies, and in developing ad-hoc solutions to help large corporations mitigate security threats. In this exciting and tell-all interview, Check Point’s Global CISO Jonathan Fishbein shares a […] The post Navigating the Pandora’s Box that is ChatGPT: Insights from a Global CISO appeared first on CyberTalk.

---

Why cyber security should be treated as an ESG issue

EXECUTIVE SUMMARY: The World Economic Forum describes cyber security as one of the top five global risks, highlighting the need for organizations to integrate cyber security into ESG risk management. As a result, effective oversight of security has become a priority for investors and regulators, who continue to push for robust oversight frameworks. Organizations that […] The post Why cyber security should be treated as an ESG issue appeared first on CyberTalk.

---

New Infrastructure of MuddyWater APT Group Uncovered

MuddyWater has been employing SimpleHelp, a lawful tool used for managing and controlling remote devices, to establish persistence on compromised devices, revealed researchers. The attackers send phishing emails containing links to file storage systems such as OneDrive, Dropbox, or OneHub to download SimpleHelp installers.

---

Fifty percent of CISOs confident that software is completely tested

As companies shift towards hybrid and multicloud environments, CISOs have expressed concerns over keeping their software and data secure.

---

Wargaming an effective data breach playbook

Foreseeing every possible twist and turn of a breach may be impossible, but through extensive wargaming, security teams can simulate diverse situations to give them a proactive edge.

---

Hackers Storing Malware in Google Drive as Encrypted ZIP Files To Evade Detection

Google’s Cybersecurity Action Team (GCAT) and Mandiant researched a list of techniques and methods used by threat actors over the period for penetrating the environments and other malicious activities.

---

Cyber insurance premium hikes slowed in 2022, Fitch says

Experts say insurance companies’ demand for stronger cybersecurity practices from policyholders contributed toward fewer ransomware claims and decelerating premiums in 2022.

---

‘AuKill’ EDR killer malware abuses Process Explorer driver

The AuKill tool abuses an outdated version of the driver used by version 16.32 of the Microsoft utility, Process Explorer, to disable EDR processes before deploying either a backdoor or ransomware on the target system.

---

Giving a Face to the Malware Proxy Service ‘Faceless’ – Krebs on Security

For less than a dollar per day, Faceless customers can route their malicious web traffic through tens of thousands of compromised systems advertised on the proxy service.

---

Real estate firm OrangeTee & Tie fined for data breach involving 250,000 customers and employees

Names, bank account numbers, property transaction amounts, as well as identity card numbers were extracted from outdated database servers of the real estate firm by a cybercrime group in 2021.

---

Raspberry Robin Adopts Unique Detection Evasion Techniques

Several of the new methods Raspberry Robin uses are related to its ability to avoid being run on virtual machines (VMs), which security researchers often use to analyze malware.

---

Pre-pandemic techniques are fueling record fraud rates

Within the largest financial institutions, insurers, and retailers, the rise and adoption of AI, an impending recession, and the return of pre-pandemic fraud techniques are driving record rates of fraud attacks, according to Pindrop.

---

Two Critical Flaws Found in Alibaba Cloud's PostgreSQL Databases

A chain of two critical flaws has been disclosed in Alibaba Cloud's ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL that could be exploited to breach tenant isolation protections and access sensitive data belonging to other customers. "The vulnerabilities potentially allowed unauthorized access to Alibaba Cloud customers' PostgreSQL databases and the ability to perform a supply chain

---

Prior Supply Chain Compromise at Stock Trading Automation Company Fueled 3CX Attack

An investigation into last month's 3CX supply chain attack revealed that it was caused by another supply chain compromise where suspected North Korean attackers breached the site of Trading Technologies to push trojanized software builds.

---

Microsoft Defender update causes Windows Hardware Stack Protection mess

In a confusing mess, a recent Microsoft Defender update rolled out a new security feature called 'Kernel-mode Hardware-enforced Stack Protection,' while removing the LSA protection feature.

---

Daggerfly Cyberattack Campaign Hits African Telecom Services Providers

The campaign makes use of "previously unseen plugins from the MgBot malware framework," Symantec said. "The attackers were also seen using a PlugX loader and abusing the legitimate AnyDesk remote desktop software."

---

Detecting the Use of Stolen AWS Lambda Credentials

The use of stolen credentials can then be detected when a logging event deviates from the baseline. A similar approach could be applied to detect AWS credentials stolen from other services.

---

Microsoft SQL Servers Hacked to Deploy Trigona Ransomware

Before encrypting the system and deploying ransom notes, the malware disables system recovery and deletes any Windows Volume Shadow copies, making recovery impossible without the decryption key.

---

Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job

The notorious North Korea-aligned state-sponsored actor known as the Lazarus Group has been attributed to a new campaign aimed at Linux users. The attacks are part of a persistent and long-running activity tracked under the name Operation Dream Job, ESET said in a new report published today. The findings are crucial, not least because it marks the first publicly documented example of the

---

Beyond Traditional Security: NDR's Pivotal Role in Safeguarding OT Networks

Why is Visibility into OT Environments Crucial? The significance of Operational Technology (OT) for businesses is undeniable as the OT sector flourishes alongside the already thriving IT sector. OT includes industrial control systems, manufacturing equipment, and devices that oversee and manage industrial environments and critical infrastructures. In recent years, adversaries have recognized the