Latest Cybersecurity News And Articles
Google Reportedly in Talks to Acquire Cloud Security Company Wiz for $23B
Alphabet, Google's parent company, is in advanced talks to acquire cloud security provider Wiz for around $23 billion. Wiz recently raised $1 billion at a $12 billion valuation and has a total of $1.9 billion in funding.
Palo Alto Networks Fixed a Critical Bug in the Expedition Tool
Palo Alto Networks has released security updates to address five vulnerabilities in its products, including a critical flaw in the Expedition tool that could enable admin account takeover.
NATO Set to Build New Cyber Defense Center
NATO’s members have agreed to the construction of a new cyber-defense facility designed to help the military alliance build resilience and better respond to digital threats.
As the alliance celebrated its 75th anniversary with a summit in Washington DC from 9 to 11 July, it revealed plans for a new NATO Integrated Cyber Defence Centre (NICC), to be based at the Supreme Headquarters Allied Powers Europe (SHAPE) in Belgium.
The center will comprise civilian and military experts from across member states, and feature advanced technology designed to enhance situational awareness and boost collective cyber-resilience and defense, NATO said.
Since officially declaring cyberspace a legitimate domain for war several years ago, NATO has been enhancing its capabilities in the space.
.jfif)
- It regularly conducts cyber-defense exercises, involving non-NATO members like Japan and South Korea, and in 2022 announced plans to develop rapid response capabilities “to respond to significant malicious cyber activities.”
- Also that year, NATO successfully completed a trial of new “quantum safe” technology, designed to mitigate the future risks posed by quantum computers cracking asymmetric cryptography.
Activities like these and the NICC are being executed against a backdrop of growing concern about the possibility of a Trump presidency undermining the alliance, as well a response to increasingly aggressive moves by Russia, China and other hostile states.
- In October 2023, Microsoft warned that Chinese actors had pre-positioned themselves into critical infrastructure networks, with a view to potentially launching destructive attacks in the event of a conflict.
- Russia regularly conducts cyber-espionage campaigns against the alliance, and has tried to use false narratives to undermine it in various countries. The Kremlin still asserts that NATO ‘aggression’ was the reason for its invasion of Ukraine.
NATO Allies today (10 July 2024) agreed to establish a new centre to better protect against ever more sophisticated cyber threats.
The NATO Integrated Cyber Defence Centre (NICC) will enhance the protection of NATO and Allied networks and the use of cyberspace as an operational domain. The Centre will inform NATO military commanders on possible threats and vulnerabilities in cyberspace, including privately-owned civilian critical infrastructures necessary to support military activities.
The Centre will bring together civilian and military personnel from across the NATO Enterprise, Allied countries and experts from industry. It will leverage advanced technologies to increase our situational awareness in cyberspace and enhance collective resilience and defence.
In line with Allies’ shared values and international obligations, the Centre will promote a norms-based, predictable and secure approach to cyberspace.
The Centre will be based at NATO’s strategic military headquarters at SHAPE in Belgium. Details on the structure and functions of the Centre will be developed in the coming months.
Signal Downplays Encryption Key Flaw, Fixes it After X Drama
Signal has now taken steps to address the issue by integrating Electron's SafeStorage API to secure the data store from offline attacks. The new implementation is currently being tested and will soon be available in a Beta version.
White House Calls for Defending Critical Infrastructure
The Office of Management and Budget has issued a memorandum outlining the administration's cybersecurity priorities for fiscal year 2026, aligning with the national cybersecurity strategy.
CISA Urges Software Makers to Eliminate OS Command Injection Flaws
The US government is pressuring software manufacturers to address operating system command injection vulnerabilities following high-profile threat actor campaigns exploiting these flaws in 2024.
Several DOD IT Programs Still Don’t Have a Cyber Strategy, Watchdog Finds
The U.S. Government Accountability Office's annual assessment of the Defense Department's IT spending revealed that several programs lack approved cybersecurity strategies, leaving them vulnerable to potential cyberattacks.
Exein Raised $16.3 Million Series B to Stop Robotic Arms Going Haywire
Exein, a Rome-based startup, is addressing the critical issue of device security in the IoT space. The company recently secured €15 million (~$16.3 million) in a Series B funding round led by cybersecurity-focused VC 33N.
ClickFix Deception: A Social Engineering Tactic to Deploy Malware
McAfee Labs has uncovered a unique malware delivery method called the “Clickfix” infection chain, which starts with users being directed to compromised websites and instructed to paste a script into a PowerShell terminal.
White House to Require Increased Cybersecurity Protocols for R&D Institutions
Federal research agencies will now require covered institutions to implement cybersecurity programs for research and development security due to threats from China. The goal is to increase awareness of security threats and enable apt responses.
Credential-Stealing OSS 'Crystalray' Attacks Jump 10X
Crystalray's attack chain involves using various OSS tools for reconnaissance, scanning, and exploiting vulnerabilities. The group was first discovered in February using the "SSH-Snake" tool to exploit vulnerabilities in Atlassian Confluence.
New FishXProxy Phishing Kit Making Phishing Accessible to Script Kiddies
FishXProxy is designed to evade detection and maximize credential theft attempts, equipped with features like traffic management to hide link destinations and a cross-project tracking capability for persistent targeting.
Coyote Banking Trojan Targets LATAM with a Focus on Brazilian Financial Institutions
A .NET banking Trojan named Coyote has been identified as a threat to Brazilian financial institutions. It uses a unique execution chain involving the abuse of legitimate software to harvest user financial information.
China's APT41 Crew Adds Stealthy Malware to its Toolbox
DodgeBox deploys MoonWalk backdoor as a DAT file post-execution. The backdoor shares evasion techniques with DodgeBox and uses Google Drive for command-and-control communication.
Malicious NuGet Campaign Uses Homoglyphs and IL Weaving to Fool Devs
This new set of packages, consisting of approximately 60 packages and 290 versions, showcases a more sophisticated approach compared to earlier attacks revealed in October 2023, according to ReversingLabs.
Exim Vulnerability Affecting 1.5M Servers Lets Attackers Attach Malicious Files
Security researchers have identified a critical vulnerability affecting over 1.5 million Exim email servers, making them vulnerable to attacks that can deliver executable attachments to user accounts.
.jfif)
No comments:
Post a Comment