F-Secure’s new 'Living Secure' report offers a comprehensive look at digital priorities and habits in 2023. It highlights the digital moments we want to protect and those that make us feel most vulnerable. Download it today: https://t.co/bsuAIPlLvG
The instructions are meant to prevent losing your biggest treasure – the Directory Service. A few soldiers might be lost but the directory service will not be compromised.
A simple threat modeling exercise. You/your leadership may be focused on the destructive attacks in Ukraine: https://t.co/HC4WaKut6T. But if you're not in Ukraine, I'd argue threats against VMware Horizon should likely be a higher priority: https://t.co/WkUAoGHifj.
I published an assessment of what we currently know/don't know about the cyberattacks against Ukraine. Includes new info and some analysis. Also tried to detail how the wiper works, but Microsoft's blog was a bit confusing. Let me know if I got it wrong.
https://t.co/CrRkU9HV4K
InfoSec is:
Ten percent luck
Twenty percent tools
Fifteen percent making sense of government rules
Five percent python
Fifty percent pain
And a hundred percent learning how to clearly explain
12 notorious #ransomware actors nabbed in major Europol-led operation, via @TEISS
"This shouldn’t be seen as the end because the financial motivation behind these attacks is probably far too large for them to give up easily." - @c_gcw
https://t.co/6NffxQyR8v
#cybercrime
“The larger the impact to people or nations, the more pressure there is for these organizations to pay up or act upon the breach,” said F-Secure's @c_gcw. “This serves as motivation for attackers to continuously target them....”
“A good reminder is for all organizations to treat third-party vendors or providers as part of their organization when performing security audits."
@c_gcw of our Tactical Defense Unit on the Codecov supply chain attack
https://t.co/CSguBJi3Aa
Two brilliant threat and defence experts go deep into the questions about #ProxyLogon that really matter, post-patch: Were we breached? What do we do now? Free webcast: https://t.co/rq06JHFyoo #cybersecurity
Shout out to our TacDef team for this Attack Landscape Report🙌“Out of all #incidentresponse investigations conducted by F-Secure’s security consultants in 2020, approximately 1/3 of them involved #ransomware - often following hands-on-keyboard hacking.”
#Cybersecurity#Infosec
NEW REPORT: online extortion, data theft gaining traction among cyber criminals.
Read more about Ransomware 2.0 and other trends in the threat landscape --> https://t.co/oQDQiL6IA3
#cyberattacks | #CyberSecurity | #ransomware | #infoSec
BP Chargemaster email domain hijacked by criminals to send banking trojans
@FSecure confirmed the nature of the #malware to @GazTheJourno@TheRegister
"The email is a malspam campaign spreading a new version of the IcedID banking trojan" @c_gcw
https://t.co/ps6UdATRRT
NEW DATA FROM OUR TACTICAL DEFENSE UNIT:
Significant attacks on Microsoft Exchange ProxyLogon detected, but there’s still time to act
https://t.co/obm60uvxuY
To simplify mitigating Exchange servers from recent attacks for customers that cannot patch, Microsoft has released a tool that installs a mitigation and runs a scan for the latest webshells. Find it below:
👇👇👇