You are here

Home » Cybersecurity

Cybersecurity

Improving Phishing Awareness to Prevent Ransomware Attacks

The cybersecurity company Proofpoint recently released its annual report on user phishing awareness, vulnerability, and resilience. According to the report, 78 percent of organizations experienced email-based ransomware attacks in 2021, while 77 percent saw business email compromise attacks (BEC) increase 18 percent compared to 2020. These results demonstrate the continuing focus of adversaries to compromise users via non-technical social engineering tactics compared to exploiting technical vulnerabilities.

Ransomware Awareness – Microsoft Exchange Vulnerabilities Exploited to Deliver Cuba Ransomware

The Cuba ransomware group is exploiting Microsoft Exchange vulnerabilities to gain initial access to enterprise networks and eventually deploy ransomware, according to security researchers at Mandiant. Cuba ransomware has been around since 2019, but their activity increased in 2021 prompting the FBI to issue a FLASH advisory.

Joint Cybersecurity Advisory: New Sandworm Malware Cyclops Blink Replaces VPNFilter

The Cybersecurity and Infrastructure Security Agency (CISA), along with the FBI, the National Security Agency (NSA), and the United Kingdom’s National Cyber Security Centre (NCSC-UK), have just released a joint Cybersecurity Advisory regarding a threat actor known as Sandworm (a.k.a., Voodoo Bear, Static Kitten, et. al.) that has been observed using a new malware, referred to in the advisory as Cyclops Blink. Government agencies have previously attributed the Sandworm actor to Russian intelligence services.

Security Awareness – Phishing Method Exploits Remote Access to Circumvent MFA

A new phishing technique is helping threat actors bypass multi-factor authentication (MFA) by tricking victims into logging into their accounts directly on adversary-controlled servers using the VNC screen sharing system. MFA protocols have become one of the best defenses against phishing compromises and other malicious cyber activity.

Joint Cybersecurity Advisory: Iranian APT MuddyWater

The Cybersecurity and Infrastructure Security Agency (CISA), along with the FBI, the U.S. Cyber Command Cyber National Mission Force (CNMF), and the United Kingdom’s National Cyber Security Centre (NCSC-UK), just published a joint Cybersecurity Advisory outlining activities of the Iranian government-sponsored advanced persistent threat (APT) actors, known as MuddyWater. The APT group MuddyWater has been observed conducting cyber espionage and other malicious cyber activities targeting government and other critical infrastructure entities, across the globe.

Conti Ransomware and TrickBot Threat Actors Reportedly Merge Operational Activity

Security researchers at Advanced Intelligence (AdvIntel) believe threat actors associated with TrickBot malware have partnered with the Conti ransomware gang, according to a recent report. TrickBot is a highly modular, multi-stage malware that has been active since 2016. TrickBot has survived a takedown attempt and helped relaunch the Emotet malware.

CISA Publishes Free Cybersecurity Tools for Network Defenders

The Cybersecurity and Infrastructure Security Agency (CISA) has compiled and published a list of free cybersecurity services and tools to help organizations reduce cybersecurity risk and strengthen resiliency. Before reviewing the free tools and services, CISA strongly recommends organizations take specific foundational measures to implement a strong cybersecurity program.

Pages

Subscribe to Cybersecurity