Jupyter Notebook Ripe for Cloud Credential Theft, Researchers Warn

If not correctly locked down, Jupyter Notebook offers a novel initial access vector that hackers can use to compromise enterprise cloud environments, as seen in a recent hacking incident.

https://www.darkreading.com/cloud/jupyte...tial-theft

Israeli Cybersecurity Startups: Impact of a Growing Conflict

For Israeli startups and those closely linked to the country, the deepening crisis in the Middle East following the deadly Hamas attacks of Oct. 7 pose a fraught mix of complications.

https://www.darkreading.com/dr-global/is...-conflict-

Pro-Iranian Hacktivists Set Sights on Israeli Industrial Control Systems

The hacktivists known as SiegedSec identify ICS targets, but there's no evidence of attacks yet.

https://www.darkreading.com/dr-global/pr...ol-systems

The Need for a Cybersecurity-Centric Business Culture

Building a culture of cybersecurity is achievable by acknowledging its importance and consistently reinforcing that message.

https://www.darkreading.com/operations/t...ss-culture

North Korea's Kimsuky Doubles Down on Remote Desktop Control

The sophisticated APT employs various tactics to abuse Windows and other built-in protocols with both custom and public malware to take over victim systems.

https://www.darkreading.com/attacks-brea...op-control

Qubitstrike attacks rootkit Jupyter Linux servers to steal credentials


Hackers are scanning for internet-exposed Jupyter Notebooks to breach servers and deploy a cocktail of malware consisting of a Linux rootkit, crypto miners, and password-stealing scripts. [...]


https://www.bleepingcomputer.com/news/se...edentials/

Recently patched Citrix NetScaler bug exploited as zero-day since August


A critical vulnerability tracked as CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices has been actively exploited as a zero-day since late August, security researchers announced. [...]


https://www.bleepingcomputer.com/news/se...ce-august/

Single Sign On and the Cybercrime Ecosystem


One of the trends driving an increase is the compromise of enterprise single sign on (SSO) applications are info-stealer malware attacks. Learn more from Flare about this cybercrime ecosystem. [...]


https://www.bleepingcomputer.com/news/se...ecosystem/

Google links WinRAR exploitation to Russian, Chinese state hackers


Google says that several state-backed hacking groups have joined ongoing attacks exploiting a high-severity vulnerability in WinRAR, a compression software used by over 500 million users, aiming to gain arbitrary code execution on targets' systems. [...]


https://www.bleepingcomputer.com/news/se...e-hackers/

MATA malware framework exploits EDR in attacks on defense firms


An updated version of the MATA backdoor framework was spotted in attacks between August 2022 and May 2023, targeting oil and gas firms and the defense industry in Eastern Europe. [...]


https://www.bleepingcomputer.com/news/se...nse-firms/