Page 72 - Generation Technologies Secure Development News Today

He’s been an Air Force general, a CEO and the first federal CISO. Now Gregory Touhill is taking charge as director of the Carnegie Mellon University Software

Naikon used RainyDay for initial intrusion and Nebulae for persistence. (Source: Bitdefender) A Chinese advanced persistent threat group known as Naikon deployed a new malware backdoor to wage a lengthy cyberespionage campaign against military organizations in Southeast Asia, security firm Bitdefender reports. The group used the new backdoor Nebulae to achieve persistence on a network. It used Aria-Body loader for the initial compromise and switched to using the RainyDay backdoor for initial co...

Analysts Uncover More Servers Used in SolarWinds Attack Twitter Get Permission Researchers at the security firm RiskIQ say theyve discovered more than a dozen previously undocumented command-and-control servers used in the SolarWinds supply chain attack, showing that the cyberespionage operation was much larger than previously identified. U.S. investigators say the Russian Foreign Intelligence Service, aka SVR, was responsible for the attack. Many of these command-and-controls servers were ho...

BankInfoSecurity Twitter Huaweis App Gallery contained malicious apps (Source: Doctor Web) Joker malware has targeted more than 500,000 Android devices across the world through malicious apps in AppGallery, the official app store of Huawei, according to the security firm Doctor Web. The malicious apps offered in Huaweis AppGallery are a fully functioning virtual keyboard, a camera app, a launcher, an online messenger, a sticker collection, coloring programs and a game, Doctor Web notes. Victi...

SonicWall Patches 3 Zero-Day Flaws Compliance Twitter SonicWalls headquarters in Milpitas, California (Photo: Arc Tec Inc.) SonicWall has patched three zero-day vulnerabilities in the hosted and on-premises versions of its Email Security product after attackers began exploiting them last month. FireEye Mandiant, which uncovered the flaws, says it has seen attackers using the three vulnerabilities to place web shells, or remote access scripts, on systems. That access can then be used to access...

Fellow, Team Cymru David has been with Team Cymru since 2007. Prior, he served in the US Marine Corps as a Non-Commissioned Officer. He then worked at Indiana University where he helped to build some of the most powerful computational systems of their day. He transitioned to cybersecurity and helped launch the Research and Education Networking ISAC. At Team Cymru, he has been an engineering leader a Community Services team member, and a security analyst. David led efforts to secure the firm’s...

Texas Man Charged With Planning to Bomb AWS Data Center Compliance Twitter Get Permission A 28-year-old Texas man is facing a federal charge after he allegedly tried to buy explosives from an undercover FBI agent to bomb an Amazon Web Services data center in Virginia, according to the Justice Department. Seth Aaron Pendley of Wichita Falls faces a felony charge of malicious attempt to destroy a building with an explosive. The charge carries a maximum 20-year federal prison term. The FBI arres...

An Alternative Approach to Cryptocurrency Security May 5, 2021 nickster2407) • April 7, 2021     Gideon Samid, CTO, BitMint Todays cryptocurrencies are based on cryptographic standards that eventually could be broken via quantum computing, says Gideon Samid of BitMint, which has developed a virtual currency based instead on the concept of "quantum randomness." Samid says relying on algorithmic complexity for cryptogr...

GovInfoSecurity March 31, 2021 Get Permission As concerns about the number of attacks targeting domain name system protocols continue to grow, the National Security Agency and the Cybersecurity and Infrastructure Security Agency have released new guidance on how to choose and deploy a Protective Domain Name System service to strengthen security. The domain name system protocol, or DNS, acts as a "phone book" for the internet, taking the domain names used every day and translating them into a n...

Iran cyberespionage campaigns targets (Source: Trend Micro) Hackers with suspected ties to Iran are continuing to wage a cyberespionage campaign against government agencies, academia and tourism organizations in the Middle East and nearby, according to a report by Trend Micro. The spear-phishing campaign, dubbed Earth Vetala, which is designed to steal data, exploits remote admin tools such as ScreenConnect and Remote Utilities that allow system administrators to remotely manage their enterpri...