Quash EDR/XDR Exploits With These Countermeasures

With tools and hacker groups constantly evading defenses, expanding cybersecurity beyond endpoint security becomes crucial.

https://www.darkreading.com/dr-tech/quas...ermeasures

'Operation Jacana' Reveals DinodasRAT Custom Backdoor

The previously undocumented data exfiltration malware was part of a successful cyber-espionage campaign against the Guyanese government, likely by the Chinese.

https://www.darkreading.com/threat-intel...m-backdoor

Preparing for the Unexpected: A Proactive Approach to Operational Resilience

Try these steps to create an operational resilience action plan that will satisfy financial regulators and help sustain business without disruption.

https://www.darkreading.com/operations/p...resilience

Hundreds of malicious Python packages found stealing sensitive data


A malicious campaign that researchers observed growing more complex over the past half year, has been planting on open-source platforms hundreds of info-stealing packages that counted about 75,000 downloads. [...]


https://www.bleepingcomputer.com/news/se...tive-data/

Lyca Mobile investigates customer data leak after cyberattack


Lyca Mobile has released a statement about an unexpected disruption on its network caused by a cyberattack that may have also compromised customer data. [...]


https://www.bleepingcomputer.com/news/se...berattack/

Microsoft releases new, faster Teams app for Windows and Mac PCs


A new Microsoft Teams application, faster and completely redesigned, is generally available for all Windows and macOS users starting today. [...]


https://www.bleepingcomputer.com/news/mi...d-mac-pcs/

Amazon to make MFA mandatory for 'root' AWS accounts by mid-2024


Amazon will require all privileged AWS (Amazon Web Services) accounts to use multi-factor authentication (MFA) for stronger protection against account hijacks leading to data breaches, starting in mid-2024. [...]


https://www.bleepingcomputer.com/news/se...-mid-2024/

NSA and CISA reveal top 10 cybersecurity misconfigurations


The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) revealed today the top ten most common cybersecurity misconfigurations discovered by their red and blue teams in the networks of large organizations. [...]


https://www.bleepingcomputer.com/news/se...gurations/

China-linked cyberspies backdoor semiconductor firms with Cobalt Strike


Hackers engaging in cyber espionage have targeted Chinese-speaking semiconductor companies with TSMC-themed lures that infect them with Cobalt Strike beacons. [...]


https://www.bleepingcomputer.com/news/se...lt-strike/

Exploits released for Linux flaw giving root on major distros


Proof-of-concept exploits have already surfaced online for a high-severity flaw in GNU C Library's dynamic loader, allowing local attackers to gain root privileges on major Linux distributions. [...]


https://www.bleepingcomputer.com/news/se...r-distros/