You are here

Home » Cybersecurity

Cybersecurity

Threat Awareness – Complex Social Engineering Attack Uses Phone Pressure to Get Victims to Click

Sophos has written a blog describing its investigation into a social engineering-based attack chain that used a unique approach to get the victim to click on a malicious payload. This peer-pressure based tactic allowed the attackers to infect the network, despite the victim quickly detecting it.

Don’t Delay! – MITRE’s NO-COST Research Proposal for Water and Wastewater Cyber Resilience

As originally heard during WaterISAC’s July Cyber Threat Briefing, MITRE is extending an offer to 5 water or wastewater utilities to participate in its NO-COST research project that will aid in gaining valuable insights into your OT environment. Don’t delay! MITRE is looking to finalize the participants before the end of August.

The goal of this project is to:

Threat Trend Awareness – CrowdStrike 2023 Threat Hunting Report: Attackers Preferring Interactive Hands-on-Keyboard Intrusions

CrowdStrike released its 2023 Threat Hunting Report, with a key takeaway being that the average time between attackers gaining an initial foothold on a victim’s network and compromising additional devices is 79 minutes, down from 84 minutes in 2022.

Threat Awareness – EvilProxy Hybrid Phishing Campaign Targeting Executive Accounts at Over 100 Global Organizations

Proofpoint has written a blog discussing its research into an EvilProxy-based campaign targeting high-level business leaders across 100 global organizations. Successful cloud account takeover incidents have increased over 100 percent over the last six months, with the ultimate goal of establishing persistent access to executive’s business accounts.

CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – August 8, 2023

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Two Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

Security Awareness – The Threat of the Malicious QR Code and How to Mitigate It

AT&T has posted a blog discussing the threat of malicious QR codes and how to mitigate them. Due to the ease of creation and the convenience of use, QR codes are a popular method organizations use to drive web traffic from the physical to the virtual. However, QR codes also engender trust, which can be abused by threat actors.

Pages

Subscribe to Cybersecurity