News

Latest news about B2B cyber security >>> PR agencies: add us to your mailing list - see contact! >>> Book an exclusive PartnerChannel for your news!

Hackers are targeting Microsoft Teams
Hackers are targeting Microsoft Teams

Recent reports show that hackers are using Microsoft Teams to spread malware. The attacks are carried out by attaching .exe files to Teams chats to install a trojan on the end user's computer. The Trojan is then used to install malware. Lookout lists possible tactics and countermeasures. “The first tactic used by hackers is to obtain Microsoft 365 credentials from employees, which would give them access to all applications in the Microsoft suite. Lookout data shows that attackers are primarily targeting mobile channels such as SMS, social media platforms, messaging apps...

Read more

Mandiant module assesses ransomware resilience

Mandiant helps organizations assess their ability to defend against ransomware attacks. The new Mandiant Advantage Ransomware Defense Validation offering provides security professionals with ongoing, secure, and measurable insight into their ability to defend against specific ransomware families. Mandiant, the leader in dynamic cyber defense and incident response, releases the Ransomware Defense Validation module within the Mandiant Advantage platform. It examines how well companies can fend off ransomware attacks. This includes answers to the question in which attack phase the security measures failed or were successful. Ransomware attack: Tool checks the ability to defend yourself Ransomware attacks have…

Read more

Never before so many DDoS attacks as in the fourth quarter of 2021
Kaspersky_news

DDoS attacks hit a sad all-time high in the last quarter of 2021. According to Kaspersky telemetry, the total number of DDoS attacks increased by 2021 percent compared to the third quarter of 52. This is 4,5 times higher than the same period last year. Kaspersky experts see the reasons, among other things, in the Christmas sales season and the increasing popularity of cryptocurrencies. Extremely high number of DDoS attacks In a DDoS attack, cybercriminals send a large number of requests to the addressed web resource with the aim of restricting its service or temporarily paralyzing it. The attacks can last for several days and…

Read more

Study: Attacks on the software supply chain tripled
Study: Attacks on the software supply chain tripled

Aqua Security, the leader in cloud-native security, announces the results of the latest Software Supply Chain Security Review study into software supply chain attacks. Over a period of six months, the experts were able to determine that the attacks in 2021 tripled compared to 2020. Cyber ​​criminals target vulnerabilities in the software supply chain to inject malware and backdoors. To do this, they mainly use security gaps in open source software, inject malicious code (“poisoning”) and exploit general problems with the integrity of software code. The Software Supply Chain Security Review study was conducted by Argon…

Read more

ESET analyzes APT attacks on Windows kernel
Eset_News

Unguarded control center: ESET analyzes attacks on Windows kernel. European IT security manufacturer publishes new research results on how APT groups (Advanced Persistent Threat) exploit the vulnerabilities for attacks. ESET Research department publishes the results of their vulnerability analysis of signed Windows kernel drivers. According to the security experts, these are increasingly being used by so-called APT (Advanced Persistent Threat) groups exploited for targeted attacks against companies. The detailed technical analyzes and effective defense techniques are now available as a blog post on WeLiveSecurity. Background on Windows kernel drivers In Microsoft Windows operating systems there are different types of kernel drivers. While device drivers require a rigorous development process focused on...

Read more

Hackers organize themselves more and more professionally
Hackers organize themselves more and more professionally

In the course of 2021, hackers have organized their underground ecosystems better and better, so that in the new year 2022 even more professional attack patterns must be expected. According to the security experts at Radware, ransomware groups in particular are increasingly looking for allies among experienced contract hackers. Attacks on MSPs and 5G network operators are also expected. For example, ransomware groups Avaddon, SunCrypt, Ragnar Locker, and Hello Kitty are known to use DDoS attacks to further pressure their victims. "Such groups regularly publish messages hiring experts in areas such as backup technology - not to...

Read more

Mandiant: Cyber ​​security forecasts for 2022

Mandiant publishes its report "14 Cyber ​​Security Predictions for 2022 and Beyond," which predicts the biggest cyber threats for years to come. Those forecasts were made on the basis of current knowledge and trends. The past two years have been shaped by the pandemic. Remote work is still changing the attack surface of many companies significantly. In addition, groups of hackers are constantly evolving, learning from their mistakes and changing their tactics, techniques and procedures. It is all the more important to keep an eye on developments, always be one step ahead of the attackers and open ...

Read more

Malware Tardigrade targets biotechnology companies
B2B Cyber ​​Security ShortNews

Polymorphic malware starts data theft after ransomware attack. Malware Tardigrade is increasingly targeting biotechnology companies. Biotech companies should review their manufacturing networks, many of which are used to manufacture critical drugs or vaccines, for signs of a newly discovered, sophisticated intellectual property theft attack. According to the Bioeconomy Information Sharing and Analysis Center (BIO-ISAC), attacks known as tardigrades are currently spreading within the industry. The malware is highly configurable, adapts to the environment it infected and can act autonomously if cut off from the attacker's command and control server ...

Read more

2022: Attacks on cryptocurrencies, financial systems, info dealers
2022: Attacks on cryptocurrencies, financial systems, info dealers

Kaspersky provides an insight into the financial threats of the coming year 2022: financial systems at risk, info dealers on the rise, and attacks on cryptocurrencies through wallets with backdoors. In the coming year - according to forecasts by Kaspersky - state-supported groups will increasingly target the cryptocurrency industry and cybercriminals will take advantage of investors by creating fake wallets with backdoors. In addition, attacks on payment systems and more advanced mobile threats are on the rise. Crypto currencies: faster money for cyber criminals Cyber ​​criminals like to exploit changes and upheavals for their own purposes and adapt to new situations. There…

Read more

Five cybersecurity predictions for 2022
Five cybersecurity predictions for 2022

The last year and a half have been a time of massive digital transformation for many companies around the world. In order to maintain employee productivity while working on the move, a decision sometimes had to be made between productivity and security risks. Joe Carson, security expert at Thycotic Centrify, has looked at the current year and gives five forecasts for cybersecurity for 2022. Most employees have now got used to their home office and enjoy the opportunity to better balance private and professional tasks. This situation has prompted many companies to switch to a permanent ...

Read more