Hawaii Cybersecurity Journal

MORE SECURITY HEADLINES

Black Basta Ransomware Linked to FIN7 Cybercrime Group

Sentinel One has found evidence suggesting that the Black Basta ransomware is linked to the FIN7 cybercrime group. [Read More]

Red Cross Eyes Digital Emblem for Cyberspace Protection

The Red Cross is seeking support to create a “digital red cross/red crescent emblem” that would make clear to military and other hackers that they have entered the computer systems of medical facilities or Red Cross offices. [Read More]

Binary Defense Raises $36 Million for MDR Platform

Managed detection and response provider Binary Defense Systems this week announced it has raised $36 million in its first funding round. [Read More]

Cyberattack Causes Trains to Stop in Denmark

Trains stopped in Denmark over the weekend as a result of a cyberattack targeting an IT subcontractor. [Read More]

Microsoft Extends Aid for Ukraine's Wartime Tech Innovation

Ukraine and Russia are fighting “a new type of war,” with cyberweapons and other types of digital technology playing a pivotal role, Microsoft's Brad Smith said. [Read More]

Cisco Patches High-Severity Bugs in Email, Identity, Web Security Products

Cisco has released patches for high-severity vulnerabilities in Identity Services Engine, Email Security Appliance, Secure Email and Web Manager, and Secure Web Appliance. [Read More]

Webinar Today: ESG - CISO's Guide to an Emerging Risk Cornerstone

Join Mastercard’s Johan Gerber, EVP, Cyber and Security Products, as he discusses the strategies and tools needed to mitigate ESG risk on a business’s supply chain and reputation. [Read More]

Splunk Patches 9 High-Severity Vulnerabilities in Enterprise Product

Splunk on Wednesday announced the release of patches for multiple vulnerabilities in Splunk Enterprise, including nine high-severity issues. [Read More]

French-Speaking Cybercrime Group Stole Millions From Banks

A French-speaking cybercrime group tracked as Opera1er may have stolen more than $30 million from banks and other organizations. [Read More]

Checkmk Vulnerabilities Can Be Chained for Remote Code Execution

Multiple vulnerabilities in IT Infrastructure monitoring solution Checkmk could be chained to execute code remotely, without authentication. [Read More]

SECURITYWEEK EXPERTS

Offense Gets the Glory, but Defense Wins the Game

Derek Manky - Incident Response

Organizations may better align their defenses to adapt and react proactively to rapidly changing attack approaches when they have a better grasp of the objectives and strategies employed by their adversaries.

Read full story

Tailoring Security Training to Specific Kinds of Threats

Jeff Orloff - Training & Certification

By focusing on attack tactics and techniques that pose clear and present danger to the business, a company can achieve the greatest return on its training initiatives.

Read full story

How to Prepare for New SEC Cybersecurity Disclosure Requirements

Gordon Lawson - Incident Response

The new SEC requirements are putting on paper what many companies—public and private—should have been investing in already.

Read full story

Leveraging Managed Services to Optimize Your Threat Intelligence Program During an Economic Downturn

Landon Winkelvoss - Risk Management

How organizations can use managed services to optimize their threat intelligence program during an economic downturn.

Read full story

Cybersecurity Awareness Month: 5 Actionable Tips

Torsten George - Network Security

Here are five best practices for defeating against most attacks, hopefully making the need for future Cybersecurity Awareness Months obsolete.

Read full story

Anticipation and Action: What's Next in SOC Modernization

Marc Solomon - Network Security

Within the context of security operations, anticipation teams use internal and external threat and event data across their security infrastructure for context and analytics and to become more proactive.

Read full story

Automotive Security Threats Are More Critical Than Ever

Marie Hattar - ICS/OT

Cybersecurity within the automotive industry has a long way to go to catch up to traditional enterprise cybersecurity standards and best practices.

Read full story

The Zero Day Dilemma

Gordon Lawson - Endpoint Security

Why are zero day exploits so effective, and so highly prized by bad actors? The reason has to do with the way cyber security defenses work.

Read full story

Multi-Cloud Networks Require Cloud-Native Protection

John Maddison - Cloud Security

By integrating with native security services on major cloud platforms, a CNP solution can effectively correlate security findings to pinpoint risks and recommend effective mitigation.

Read full story

"Left and Right of Boom" - Having a Winning Strategy

Torsten George - Endpoint Security

Unfortunately, there is no such thing as 100 percent protection. Therefore, we cannot solely focus on “Left of Boom” processes, but also have to talk about the “Right of Boom”.

Read full story

Saturday, November 5, 2022

Bleepingcomputer.com: Latest Cybersecurity Articles

Micosoft sued for open-source piracy through GitHub Copilot.

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 05 November 2022, 1709 UTC. Content provided by "Bleepingcomputer.com."

Source: https://www.bleepingcomputer.com/

Please click link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).

LATEST ARTICLES

SECURITY
Microsoft sued for open-source piracy through GitHub Copilot
Programmer and lawyer Matthew Butterick has sued Microsoft, GitHub, and OpenAI, alleging that GitHub's Copilot violates the terms of open-source licenses and infringes the rights of code authors.
- BILL TOULAS
- NOVEMBER 05, 2022
- 10:07 AM
- 1
DEALS
Master Excel with early Black Friday pricing on 72 hours of training
For a limited time, you can get the entire 2022 Excel Expert Bundle for $29.99 with no coupon required. Don't wait, though: Pricing is subject to availability.
- BLEEPINGCOMPUTER DEALS
- NOVEMBER 05, 2022
- 08:12 AM
- 0
SECURITY
FBI: Hacktivist DDoS attacks had minor impact on critical orgs
The Federal Bureau of Investigation (FBI) said on Friday that distributed denial-of-service (DDoS) attacks coordinated by hacktivist groups have little to no impact.
- SERGIU GATLAN
- NOVEMBER 04, 2022
- 04:29 PM
- 0
TECHNOLOGY
ACE seizes 42 soccer and live TV piracy web domains with millions of visitors
The Alliance for Creativity and Entertainment (ACE) has shut down 42 websites for the pirated streaming of televised soccer games and live TV, seizing their domains and taking down the illegal streaming services.
- BILL TOULAS
- NOVEMBER 04, 2022
- 04:16 PM
- 0
SECURITY
British govt is scanning all Internet devices hosted in UK
The United Kingdom's National Cyber Security Centre (NCSC), the government agency that leads the country's cyber security mission, is now scanning all Internet-exposed devices hosted in the UK for vulnerabilities.
- SERGIU GATLAN
- NOVEMBER 04, 2022
- 03:22 PM
- 3
TECHNOLOGY, GOVERNMENT
Z-Library eBook site domains seized by U.S. Dept of Justice
Internet domains for the popular Z-Library online eBook repository were seized early this morning by the U.S. Department of Justice, preventing easy access to the service.
- BILL TOULAS
- NOVEMBER 04, 2022
- 01:53 PM
- 0
SECURITY
Robin Banks phishing service returns to steal banking accounts
The Robin Banks phishing-as-a-service (PhaaS) platform is back in action with infrastructure hosted by a Russian internet company that offers protection against distributed denial-of-service (DDoS) attacks.
- BILL TOULAS
- NOVEMBER 04, 2022
- 11:48 AM
- 1
MICROSOFT
Windows 11 22H2 blocked on systems using Xbox Game Bar Capture
Microsoft is now blocking the Windows 11 2022 Update from being offered on some systems because of compatibility issues with the Xbox Game Bar Capture feature.
- SERGIU GATLAN
- NOVEMBER 04, 2022
- 10:40 AM
- 0
DEALS
Prep for a career in cybersecurity with this $49 CompTIA boot camp
The full bundle contains well over 200 hours of education, and it's now available for a deep discount. You can get the full CompTIA SuperBundle today for $49, a savings of hundreds off the combined MSRP for all courses.
- BLEEPINGCOMPUTER DEALS
- NOVEMBER 04, 2022
- 07:24 AM
- 0
SECURITY
As Twitter brings on $8 fee, phishing emails target verified accounts
As Twitter announces plans to charge users $8 a month for Twitter Blue and verification under Elon Musk's management, BleepingComputer has come across several phishing emails targeting verified users.
- AX SHARMA
- NOVEMBER 04, 2022
- 05:55 AM
- 5
MICROSOFT
Microsoft rolls out fix for Outlook disabling Teams Meeting add-in
Microsoft is rolling out a fix for a known issue affecting Outlook for Microsoft 365 users and preventing them from scheduling Teams meetings because the option is no longer available on the app's ribbon menu.
- SERGIU GATLAN
- NOVEMBER 03, 2022
- 07:18 PM
- 0
MICROSOFT
Microsoft Teams now boasts 30% faster chat, channel switches
Microsoft has significantly reduced latency for Windows and Mac users of the Teams desktop client in some critical scenarios when interacting with the application.
- SERGIU GATLAN
- NOVEMBER 03, 2022
- 05:33 PM
- 0
SECURITY
RomCom RAT malware campaign impersonates KeePass, SolarWinds NPM, Veeam
The threat actor behind the RomCom RAT (remote access trojan) has refreshed its attack vector and is now abusing well-known software brands for distribution.
- BILL TOULAS
- NOVEMBER 03, 2022
- 03:36 PM
- 0
SECURITY
New Crimson Kingsnake gang impersonates law firms in BEC attacks
A business email compromise (BEC) group named 'Crimson Kingsnake' has emerged, impersonating well-known international law firms to trick recipients into approving overdue invoice payments.
- BILL TOULAS
- NOVEMBER 03, 2022
- 02:33 PM
- 0
SECURITY
LockBit ransomware claims attack on Continental automotive giant
The LockBit ransomware gang has claimed responsibility for a cyberattack against the German multinational automotive group Continental.
- SERGIU GATLAN
- NOVEMBER 03, 2022
- 02:25 PM
- 0
DEALS
Get sharp, clear audio with this noise-cancelling earbuds deal
Good audio is crucial for hybrid work, getting more out of your exercise, and relaxing after a long day. These noise-cancelling wireless earbuds put great sound in your pocket for $49.99, but act quickly; just like Black Friday itself, once this deal is sold out, it's gone.
- BLEEPINGCOMPUTER DEALS
- NOVEMBER 03, 2022
- 02:11 PM
- 0
SECURITY
OPERA1ER hackers steal over $11 million from banks and telcos
A threat group that researchers call OPERA1ER has stolen at least $11 million from banks and telecommunication service providers in Africa using off-the-shelf hacking tools.
- BILL TOULAS
- NOVEMBER 03, 2022
- 11:14 AM
- 0
SECURITY
ALMA Observatory shuts down operations due to a cyberattack
The Atacama Large Millimeter Array (ALMA) Observatory in Chile has suspended all astronomical observation operations and taken its public website offline following a cyberattack on Saturday, October 29, 2022.
- BILL TOULAS
- NOVEMBER 03, 2022
- 10:46 AM
- 0
SECURITY, CRYPTOCURRENCY
New clipboard hijacker replaces crypto wallet addresses with lookalikes
A new clipboard stealer called Laplas Clipper spotted in the wild is using cryptocurrency wallet addresses that look like the address of the victim's intended recipient.
- BILL TOULAS
- NOVEMBER 03, 2022
- 09:10 AM
- 0
DEALS
Get started in ethical hacking with this $43 course bundle deal
Ready to take your IT career to new heights? Then learn how to combat cybercrime with the All-In-One 2022 Super-Sized Ethical Hacking Bundle, now just $42.99.
- BLEEPINGCOMPUTER DEALS
- NOVEMBER 03, 2022
- 07:27 AM
- 0