You are here

Home » Cybersecurity

Cybersecurity

Security Awareness – “RockYou2024” Password Compilation Leak Boasts “Largest of all Time”

Cybersecurity researchers have recently reported that threat actors leaked a significant compilation of passwords on a popular hacking forum totaling 9.9 billion passwords. The compilation, known as “RockYou2024” was posted by a user named “ObamaCare” on July 4, and boasts the “largest password compilation of all time.” These kinds of sensational headlines are indeed notable. However, it’s important to note that this is not a new development, nor are these believed to all be newly leaked credentials.

Partner Report – Advisory on PRC State-Sponsored Group (APT 40) Emphasizes Importance of Patching

In a notification published today, CISA has collaborated with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) to release an advisory, People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action (AA24-190A) outlining a PRC state-sponsored cyber group’s activity.

(TLP:CLEAR) Threat Advisory – Another Phishing Campaign Impersonates State CDC Drinking Water Program

WaterISAC has been made aware of a second phishing attempt against Maine water operators. This time the campaign also targeted well drillers. The campaign was reported to the Maine CDC Drinking Water Program on June 24, 2024, and was observed using a similar template as the prior attempt reported in January 2024 – Threat Advisory – Phishing Campaign Impersonates State CDC Drinking Water Program.

Cyber Resilience - Why Modern Hacktivism Matters to Water and Wastewater Utilities

A recent post by Google Cloud’s Mandiant discusses the how the global revival of hacktivism requires increased vigilance from defenders. This increased vigilance includes defenders of the water and wastewater systems sector, as it has seen multiple attacks from the modern hacktivist classification of threat actors in recent months.

Cyber Resilience – As Snowflake Continues to Snowball

A recent post by Cisco Talos Intelligence considers the many implications and follow-on attacks originating from leaked and/or stolen credentials for the Snowflake cloud data platform and reminds us that this is indicative of a much larger issue. Talos points out that the Snowflake incident isn’t an outlier but is just another incident in the long line of identity access and credential theft incidents.

Pages

Subscribe to Cybersecurity