Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3807 articles
Wiz’s new preview integration scans Terraform configurations for secrets and misconfigurations at the post-plan or pre-apply stage. Workspaces can make failed checks advisory or mandatory, with mandatory failures stopping deployment.
Wiz says its new OpenAI connector maps models, Assistants, fine-tuning jobs, users, and training data, and identifies risks such as exposed secrets, sensitive data, misconfigurations, and excessive permissions across OpenAI and cloud environments.
A December roundup highlights Russia-linked disinformation, the FBI’s disruption of ALPHV, the Kyivstar outage, law-enforcement arrests and marketplace seizures, and an unverified release of 1.9 million credit cards.
DarkOwl’s 2023 recap highlights launches including DarkSonar, Darknet Services and Actor Explore, plus Vision UI availability on AWS Marketplace. The company says internal and beta testing found elevated DarkSonar scores before about 75% of publicly acknowledged breach
DarkOwl reviews reported cyber activity during the first two months of the Israel-Hamas conflict, including hacktivist threats and attack claims, a reported spoof attack on Israel’s RedAlert app, and alleged data theft and breaches.
Huntress says it has improved Microsoft 365 login detections and onboarding after acknowledging gaps in its MDR service, and outlines planned detection updates for account takeovers, inbox rules and suspicious applications.
A November roundup highlights reporting on Middle East cyber espionage, ransomware claims and disruption, alleged data access, phishing services, and ransomware-group activity.
Wiz announced cloud-development security features including GitHub repository scanning, cloud-to-code risk tracing, container image signature validation, agentless SBOM visibility, and a browser extension for cloud security insights.
DarkOwl analysts found dark-web offers for hacked accounts, payment-card data and refunding services ahead of Black Friday and Cyber Monday, alongside fraud targeting e-commerce platforms and their customers.
Wiz announced AI security posture management features for its CNAPP, including AI service inventory, configuration checks, sensitive training-data controls, attack-path analysis and a dashboard for prioritizing risks.
Hunt says IOC-Hunter monitors more than 140 security sources and uses ChatGPT’s API to extract IOCs, including IP addresses, hostnames, and file hashes, then provides context through its dashboard.
Wiz says its admission controller can verify container image signatures and trusted sources, block unverified images from Kubernetes deployments, and provide event context to help investigate suspicious deployment attempts.
DarkOwl’s October roundup highlights reports on Lazarus’s Lightless Can backdoor, Magecart skimming, ransomware incidents, attacks on Trigona infrastructure, and activity by Predatory Sparrow and KillNet.
DarkOwl reports that pro-Palestinian groups defaced about 125 Israeli websites and 157 websites overall, and publicized claims of accessing systems and releasing data. The claims were not independently verified.
Huntress says its assessment found files believed to contain plaintext passwords on about 1.6% of more than 2 million managed endpoints. It recommends password managers, MFA, security training and account monitoring, and added Credential Reports to its EDR offering.
Wiz says its Google Workspace support adds identity and permission visibility, misconfiguration alerts, lateral-movement path analysis, and more than 50 near-real-time threat detection rules for Google Cloud customers.
DarkOwl’s Q3 2023 updates add analyst-curated leak context, Telegram and Discord channel and user searches, expanded forum views, and new lexicon queries. The post also highlights several collected leaks.
DarkOwl analysts compiled Telegram channels covering the Middle East conflict, distinguishing conflict-media accounts from hacktivist groups involved in DDoS attacks and defacements. They observed more propaganda and misinformation on conflict-media accounts.
DarkOwl found that some Hamas-linked and pro-Palestinian Telegram channels went quiet before October 7, while others remained active. The researchers found no clear coordinated pattern and could not establish that inactivity was linked to the attacks.
DarkOwl announced a project to collect strategies from OSINT professionals for reducing the mental health impact of distressing content. The project plans to validate strategies against empirical evidence and share them anonymously and freely.
DarkOwl reported that groups took sides and claimed DDoS attacks, defacements and data leaks amid the Israel-Hamas conflict. The researchers said many claims were unverified, and the Red Alert app manager denied claims it was down.
A September roundup summarizes the claimed ALPHV/BlackCat attack on MGM, malware and credential-theft campaigns, GhostSec’s release of alleged surveillance-tool code, a Snatch ransomware warning, and a Finnish dark-web marketplace takedown.
ThreatFabric says a new Xenomorph campaign uses phishing pages to distribute malicious APKs, targets more than 30 U.S. banks, Portuguese financial institutions and cryptocurrency wallets, and has driven thousands of downloads, particularly in Spain and the U.S.
Wiz says its SageMaker support can flag publicly accessible notebooks, detect pre-signed notebook URLs, identify excessive permissions, and help customers assess data-leakage and data-poisoning risks.
