The U.K.’s National Cyber Security Centre (NCSC) and National Farmers’ Union (NFU) have issued guidance to help the agricultural sector stay secure in cyberspace. It is the first time farmers have been given tailor-made cybersecurity advice. Keep Reading
As federal agencies continue to evolve cloud infrastructures, they are likewise evolving security approaches. Keep Reading
Re-establishing trust in the organization’s on-premises and cloud environments with minimal business impact requires in-depth investigation and an understanding of potential methods of persistence. Keep Reading
SUNBURST is a trojanized version of a digitally signed SolarWinds Orion plugin called SolarWinds.Orion.Core.BusinessLayer.dll. The plugin contains a backdoor that communicates via HTTP to third party servers. Keep Reading
NIST's National Cybersecurity Center of Excellence (NCCoE)—in collaboration with members of the business community and vendors of cybersecurity solutions—has built example solutions to address the data integrity challenges posed by ransomware and other destructive events. Keep Reading
They continue to engage in more conventional offensive cyber activities ranging from website defacement, distributed denial of service (DDoS) attacks, and theft of personally identifiable information, says CISA. Keep Reading
Vietnamese government-backed hackers have been recently spotted deploying cryptocurrency-mining malware alongside their regular cyber-espionage toolkits, Microsoft said on Monday. Keep Reading
Two Romanian suspects have been arrested for allegedly running the CyberSeal and Dataprotector crypting services to evade antivirus software detection. Keep Reading
A new report provides law enforcers, policymakers and other organizations with information on existing and potential attacks leveraging AI and recommendations on how to mitigate these risks. Keep Reading
Lookout found that 77 percent of mobile phishing attempts on pharmaceutical organizations through the third quarter of 2020 intended on delivering malware. Keep Reading
While consumers are aware of increased risks and scams via the internet, they still plan to do more shopping online – and earlier – this holiday season. Keep Reading
Since Volexity’s 2017 discovery that OceanLotus was behind a sophisticated massive digital surveillance campaign, the threat group has continued to evolve. Keep Reading
Agencies have identified a malware variant—referred to as ComRAT—used by the Russian-sponsored advanced persistent threat (APT) actor Turla. Keep Reading
In addition, U.S. Cyber Command has released the malware sample to the malware aggregation tool and repository, VirusTotal. Keep Reading
When it comes to defending against foreign cyber powers, many U.S. national security experts tend to hype up countries with powerful hacking capabilities, such as China, Iran, Russia, and North Korea. Keep Reading
The Triton malware — known also as TRISIS and HatMan in open source reporting — was designed specifically to target and manipulate industrial safety systems. Keep Reading
From November 2015 to October 2019, the defendants deployed destructive malware for the strategic benefit of Russia. Keep Reading
Emotet—a sophisticated Trojan commonly functioning as a downloader or dropper of other malware—resurged in July 2020, after a dormant period that began in February. Keep Reading
Europol has released its 2020 cybercrime report which updates on the latest trends and the current impact of cybercrime within the EU and beyond. Keep Reading
Cybersecurity experts from the U.S. military and the private sector have spent recent weeks working with two American cities to test their ability to respond during a simulated cyberattack layered with several simulated physical disruptions. Keep Reading