Security Talk (147)
News, and Disucssions centered on Security
Wednesday, 27 April 2022 11:07
More Flaws Found in NPM Allowing Attackers to Attach Malicious Packages to Known Good Devs.
Written by Sean Kalinich
A new flaw has been identified in the Node.js package manager, NPM. The flaw is being described as a logical flaw, but in reading over the data it seems more like a permissions flaw. The good news is that as…
Read 1076 times
Published in
Security Talk
Wednesday, 27 April 2022 06:30
Yet Another New Attack Method Shows Up From the Group Behind Emotet
Written by Sean Kalinich
Yesterday we told you that the gang behind Emotet was looking to used Excel add-ins as a possible new technique to compromise systems as part of their spamming campaigns. The detected techniques were labeled as potentially being part of research…
Read 1198 times
Published in
Security Talk
Tuesday, 26 April 2022 09:31
The Group Behind Emotet is Looking to Get Around Microsoft’s VBA Changes
Written by Sean Kalinich
TA542 the wonderful people that brought you Emotet appears to be in the middle of a development and testing cycle on new delivery methods. According to researchers at ProofPoint the creators or the Emotet Botnet are potentially looking to find…
Read 1232 times
Published in
Security Talk
Friday, 22 April 2022 10:13
Amazon’s Awkward Moment as Log4J Fix has an Escalation and Escape Bug
Written by Sean Kalinich
It seems that Amazon’s hotfix for Log4Shell in their AWS environment might have been a bit rushed. According to a review of the hot there are a total of four CVEs specifically related to the hotfix and how it functions.…
Read 1225 times
Published in
Security Talk
Thursday, 21 April 2022 05:37
Okta now says Lapsus$ only had 25 Minutes of Fame with Two Clients
Written by Sean Kalinich
The breach of IDAM group Okta in January by the self-promoting group Lapsus$ amidst other high-profile breaches and data leaks this year was a significant concern. The concern rose because when the incident first happened, Okta passed it off as…
Read 1144 times
Published in
Security Talk
Thursday, 14 April 2022 16:51
CISA warns that US ICS/SCADA Systems are being Targeted by Threat Groups
Written by Sean Kalinich
CISA has issued another warning that SCADA/ICS systems are being targeted for attack. This time they are in the sights of Nation-State groups and with customized tools. The tools are part of follow-on activities after the initial beachhead has been…
Read 1149 times
Published in
Security Talk
Wednesday, 13 April 2022 05:13
Law Enforcement Celebrates Another Hacker Forum Takedown as the Seizure of RaidForums is Announced.
Written by Sean Kalinich
2022 has been a busy year for the information security industry on both sides of the playing field. We have seen an increase in target attacks on businesses, a larger number of Zero-Day vulnerabilities disclosed that were being actively exploited…
Read 905 times
Published in
Security Talk
Tuesday, 12 April 2022 09:11
Open Source Takes Another Hit as 3rd Protestware Shows up in NPM Repository
Written by Sean Kalinich
The Open Source community has been one that many leverage to help build their applications. It has become a great place to find applications packages that make building out a larger application or eco systems less time consuming. We see…
Read 1149 times
Published in
Security Talk
Monday, 11 April 2022 07:45
Leaked Conti Ransomware used in Attacks on Russian Targets
Written by Sean Kalinich
Not that long ago, a Ukrainian security researcher published a vast number of internal chats from the Ransomware group Conti. On top of that treasure trove of information the same researcher also published the source code for the Conti Ransomware.…
Read 1351 times
Published in
Security Talk
Friday, 08 April 2022 09:49
Crypto Mining Malware Targeting Amazon Lambda Serverless Environments
Written by Sean Kalinich
Some needs to let Gordan Freeman know that the Xen aliens are attacking Lambda, time to grab a crowbar and go to work. Ok, so there are no invaders from a border dimension coming and the Lambda in question is…
Read 1103 times
Published in
Security Talk
Friday, 08 April 2022 05:13
The State of Banking and Financial Malware on Google’s Play Store is Just Bad
Written by Sean Kalinich
It looks like there has been another round of malware identified on the Google Play sore and, you guessed it, the majority is focused on banks and other financial institutions. The combination of apps found totals around 515,000 downloads. 500,000…
Read 1109 times
Published in
Security Talk
Tuesday, 05 April 2022 10:32
Financial Threat Group, FIN7 Shows Signs of Evolving Tools and Coordination with Ransomware Groups
Written by Sean Kalinich
For some reason, malware, attacker tools, and even the threat groups themselves tend to be viewed and talked about as static objects (outside of the security and threat analytics world). Malware is just Malware, the same with Ransomware strains. Once…
Read 995 times
Published in
Security Talk
Tuesday, 05 April 2022 05:22
New Tactic Could be Used to Impact Charging Stations for Electronic Vehicles
Written by Sean Kalinich
Imagine you are standing at a charging station charging your shiny new EV. You smugly look at all the antiquated gas-powered cars as they pay large amounts of money to keep their old, polluting, conveyances functional. Suddenly your charging station…
Read 832 times
Published in
Security Talk
Monday, 04 April 2022 15:18
Hackers Compromise MailChimp to Pivot to Crypto and Finance
Written by Sean Kalinich
Over the weekend news surfaced that indicated users of Trezor hardware crypto wallets had received emails claiming Trezor had been breached and urging the user to reset their PIN as soon as possible. The emails turned out to be a…
Read 1002 times
Published in
Security Talk
Wednesday, 30 March 2022 15:01
FBI Sent out an Advisory Alleging a Targeted Campaign Against State Election Officials
Written by Sean Kalinich
The FBI, on March 29th, released a Private Industry Notification with vague details on a potential Phishing campaign targeting election officials in at least nine US states. The information in the advisory gives very broad information without really saying much.…
Read 1012 times
Published in
Security Talk
Wednesday, 30 March 2022 10:19
Lapsus$ Releases 70GB Allegedly from IT Firm Globant Data Despite Recent Arrests
Written by Sean Kalinich
Just when you might have thought things were calming down with Lapsus$, they bounce back from a “vacation” and dump what they are claiming is 70GB of data from IT group Globant. The leak comes after police in London announced…
Read 1291 times
Published in
Security Talk
Page 3 of 10