Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3810 articles
Wiz opened an operational Sydney data center, enabling regional data locality for customers, and added support for the Australian Cyber Security Centre’s Essential Eight framework.
A malicious torchtriton package on PyPI exploited pip’s package selection to target Linux PyTorch nightly installs from Dec. 25–30, 2022, collecting system data and files. Users were advised to remove it and rotate exposed secrets.
Wiz says its new feature checks AWS Route 53 records daily for dangling domains, including CNAMEs without an associated S3 bucket or linked to a bucket outside the organization.
Wiz says its dynamic scanner tests externally reachable cloud resources, validates exposed ports and protocols, and captures screenshots to help security teams assess and prioritize exposure.
Wiz says its enhanced inventory detects cloud services in customer environments, including newly released services, and lets teams classify services and alert when unreviewed or unwanted services are found.
Wiz announced agentless host configuration assessment for Wiz Advanced customers, with built-in and custom rules to identify OS- and application-level configuration issues across supported systems.
Wiz’s new integration sends detected AWS security issues to AWS Security Hub, where teams can aggregate findings and connect them to investigation and remediation workflows. The integration is available to all Wiz customers.
Wiz’s integration with Amazon Security Lake lets mutual customers add Wiz-identified cloud issues and other security events and logs to a customer-owned data lake using OCSF.
DarkOwl describes OMG!OMG!, a Russian darknet marketplace that drew vendors after Hydra’s seizure, including its ordering model, PGP and 2FA features, and reported account and access problems.
Wiz says its public-preview DSPM capabilities identify sensitive cloud data, map exposure paths and data lineage, prioritize risks, and block deployments that violate security policies.
Wiz says its integration with Google Cloud Security Command Center correlates threat detections with cloud risks to help prioritize investigations and responses. It is generally available to Wiz Advanced and Wiz CDR customers.
Wiz says its public-preview vSphere integration provides API-based inventory, misconfiguration and vulnerability assessment, compliance checks, and unified security policy across on-premises and cloud environments. Guest VM disk scanning is planned for a future release.
Huntress announced general availability of its macOS agent, initially focused on detecting persistence. The company says test deployments detected Bundlore and outlines common macOS infection vectors and LaunchAgent persistence.
DarkOwl analysts describe darknet discussions around Linux-targeting ransomware, phishing via ads and SMS, and vulnerabilities in Microsoft Exchange and Atlassian Confluence, including continued interest in patched Confluence flaws.
DarkOwl describes Bjorka’s 2022 leaks and doxxing targeting Indonesian organizations and officials, noting that some documents were publicly deemed valid, others disputed, and the actor’s identity and affiliations remain unclear.
DarkOwl analysts describe Exchange Market, a Chinese-language Tor marketplace observed since 2019, with listings for allegedly stolen personal data, malware, fraud and hacking services, weapons, and counterfeit documents.
Huntress and partners say they are funding a DIVD bug bounty program focused on MSPs, aiming to attract security researchers to find vulnerabilities in software these providers rely on.
Huntress announced Managed EDR, which monitors endpoint process activity and metadata, with SOC analysts reviewing suspicious activity, reporting findings and recommending remediation. Collected data is retained for seven days.
DarkOwl’s February–April 2022 timeline tracks invasion-related cyberattacks, Russian data leaks, ransomware-group divisions and infrastructure warnings. Many hacktivist claims remain unverified, and some purported leaks contain older data.
Azure added opt-in automatic updates for its OMS, Azure Diagnostics and Desired State Configuration agents, which also update OMI. The change follows Wiz’s research into CVE-2022-29149 and gaps in detecting and patching affected instances.
Huntress describes ads offering access to an MSP with 50+ customers and to UK companies, highlighting initial access brokers’ role and the risks to MSPs and their customers.
Huntress acquired Curricula, a story-based security awareness training platform, and plans to add its eLearning, phishing simulations, and related tools to the Huntress Managed Security Platform. Existing Curricula partners can continue using the service without a break
Huntress announced a program offering any MSP free internal use of its managed security platform, including 24/7 SOC support and threat hunting.
DarkOwl reports darknet offers for abortion medications and services, scams targeting potential buyers, doxxing of Supreme Court justices, and SiegedSec’s claims of data theft from Kentucky and Arkansas government networks.
