Author: HackWatchit

The post Talkin’ About Infosec News – 8/14/2023 appeared first on Black Hills Information Security.

Microsoft has named multiple threat actors part of a cybercrime gang accused of developing malicious tools capable of bypassing generative AI guardrails to generate celebrity deepfakes and other illicit content. An updated complaint identifies the individuals as Arian Yadegarnia from Iran (aka ‘Fiz’), Alan Krysiak of the United Kingdom (aka ‘Drago’), Ricky Yuen from Hong Kong, China (aka ‘cg-dot’), and Phát Phùng Tấn of Vietnam (aka ‘Asakuri’). As the company explained today, these threat actors are key members of a global cybercrime gang that it tracks as Storm-2139. “Members of Storm-2139 exploited exposed customer credentials scraped from public sources to…

We all love free stuff. (Costco samples, anyone?) However, when it comes to your family’s security, do free online protection tools offer the coverage you truly need? Not always. In fact, they might invade the privacy you’re trying to protect. Here’s why. Free tools don’t offer the level of advanced protection that life on today’s internet needs. For starters, you’ll want malware and antivirus protection that’s as sophisticated as the threats they shut down. Ours includes AI technology and has for years now, which helps it shut down even the latest strains of malware as they hit the internet for the first time. We’re…

Working from home has established itself as a norm. As of 2023, 35% of employed adults in the U.S. work from home all the time. Another 41% work from home at least part of the time.[i] While working from home offers benefits to employees and employers alike, the uptick in personal devices connecting to an organization can pose security risks. That includes malware attacks, identity theft, and ransomware, not to mention out-and-out data theft. With so many people knocking out their workdays at home, the question remains — how can everyone do it safely? Five quick tips and tools can help. Tips to protect…

FortiGuard Labs discovers Winos 4.0 malware targeting Taiwan via phishing. Learn how this advanced threat steals data and how to protect your Windows system. Fortinet’s FortiGuard Labs has disclosed details of a new malware campaign targeting Taiwanese businesses. Reaching out to Hackread.com on this discovery, prior to its publishing on Thursday, researchers revealed that this campaign was discovered in January 2025 and deployed a highly advanced malware framework, known as Winos 4.0. This attack exhibited a high severity level, and utilized a multi-stage infection process, ultimately aiming to steal sensitive information for future malicious activities. Further probing revealed that this…

As the boundaries between IT and OT environments blur and regulators move to bolster ICS cybersecurity across critical infrastructure sectors, the role of the corporate CISOs (chief information security officers) are increasingly pressured to make the monitoring and securing of OT (operational technology) infrastructure essential to their role. These CISOs have come a long way, from playing specialized support roles to becoming integral to organizational resiliency, leading oftentimes to the creation of the position of industrial CISOs.  Organizations are faced with rising intensity and sophistication of cybersecurity threats and attacks, leading CISOs to take center stage by being called upon…

Does Your Approach to NHI Policy Enforcement Make the Grade? One question that often arises is: “how effectively are we managing Non-Human Identities (NHIs) policy enforcement in our supported systems?” For numerous enterprises, maintaining a robust NHI management regime is paramount, as these digital entities control access to sensitive data and critical systems in the cyberspace. We’re stepping into where over reliance on manual processes or piecemeal solutions will hardly suffice to guarantee a robust NHI policy enforcement. Optimal NHI Policy Enforcement: What Does It Entail? From financial services to healthcare, travel to DevOps, and SOC teams, industry professionals are…

Patterson Cake // In PART 1 of “Wrangling the M365 UAL,” we talked about the value of the Unified Audit Log (UAL), some of the challenges associated with acquisition, parsing, and querying of the UAL data, and strategies for overcoming those challenges using PowerShell and SOF-ELK, focusing on how to properly format our exported data for easy ingestion into SOF-ELK, running as a locally-installed virtual machine. In this post, we’ll look at spinning up SOF-ELK on EC2 to give us greater portability, flexibility, and extensibility for UAL wrangling! For quick and easy SOF-ELK deployment, it’s hard to beat downloading the…

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Massive botnet hits Microsoft 365 accountsA recently discovered botnet of over 130,000 compromised devices is launching coordinated password-spraying attacks against Microsoft 365 (M365) accounts. PoC exploit for Ivanti Endpoint Manager vulnerabilities released (CVE-2024-13159)A proof-of-concept (PoC) exploit for four critical Ivanti Endpoint Manager vulnerabilities has been released by Horizon3.ai researchers. Avoiding vendor lock-in when using managed cloud security servicesIn this Help Net Security interview, Marina Segal, CEO at Tamnoon, discusses the most significant obstacles when implementing managed cloud security in hybrid and multi-cloud environments. 2024 phishing…