Cyberint

Here is your weekly cybersecurity update featuring major news, #vulnerabilities, #ransomware attacks, and industry insights: ⚠️Threat actors have been exploiting a vulnerability in LiteSpeed Cache, a popular WordPress plugin, to gain unauthorized access and create new WordPress administrator accounts . This flaw allows attackers to perform remote code execution on affected websites . 📢 A new attack technique known as "TunnelVision" has been discovered, allowing threat actors to intercept and leak VPN traffic using rogue DHCP servers. 🎣 The FIN7 cybercrime group has been observed using a new phishing technique involving malicious USB drives to target organizations, as reported by cybersecurity researchers. 📱A vulnerability has been found in Google Android 14 and classified as critical. This vulnerability affects an unknown function of the component Health Data Handler. Get all the details and much more in our full report: https://hubs.la/Q02xmDRF0

2024 began with a decline in the frequency of ransomware attacks worldwide (1,048 cases) after they skyrocketed in Q4 2023 with 1309 cases. Two possible explanations for this drop could be the intervention of law enforcement, as observed with #LockBit and #ALPHV gangs, and the decrease in ransom payments, prompting ransomware groups to retire and seek alternative sources of income. There is no doubt that the new faces that were introduced to the industry, along with the ongoing attacks on businesses around the world, were able to claim many victims even though the number decreased. Combined with the consistency of the industry leader – LockBit3.0 – we saw devastating results for companies worldwide, such as Hyundai Motor, Duvel Beers, and others. Read about the main actors, top targets, major incidents, and what to expect in the coming months in our Q1 2024 Ransomware Report: https://bit.ly/3wrmuU1 #Ransomware #CyberThreat | Shmuel Gihon | Adi Bleih

The FBI's latest operation, seizing BreachForums, has just come to light. In this operation, the FBI has not only shut down the BreachForums website but also their official Telegram channels and Baphomet telegram channel and website, now under FBI control. While the FBI reviews the site’s backend data and seeks information on threat actor activity, Baphomet’s arrest status remains uncertain. Read about the shut down here in Coral Tayar's blog: https://lnkd.in/dQuqVxgt #FBI #cybersecurity #BreachForums #cybercrime

Interop Tokyo でお待ちしています！（ブース番号：６S２６）私たちは6月１2日（水）から14日（金）の、 Interop Tokyo に出展いたします。皆様にお会いできることを楽しみにしています。 https://bit.ly/3wxQq0E

Para mantenerse al día con la rápida evolución de los mercados de ciberseguridad y satisfacer las demandas de los clientes, los MSSP deben ampliar continuamente su oferta. Esto presenta varios desafíos para los MSSP: reconocer las tendencias y demandas del mercado, seleccionar los proveedores de tecnología adecuados con los que asociarse y dominar rápidamente estas nuevas herramientas para soportar la prestación de servicios. Hoy 14 de mayo a las 12pm EST únete a Iker Alonso del equipo de Cyberint para entender cómo una asociación con Cyberint puede impulsar el crecimiento de tu negocio MSSP. Registrate en este link: https://bit.ly/44UyTwB

The Executive Panel held in Milan a couple of months ago touched up on the essential question "How Can We Use Threat Intelligence to Prevent Attacks?" Matteo Feraboli, Intesa Sanpaolo's Group Senior Director Cybersecurity & Anti-Fraud outlined the following: ✅ Threat intelligence is essential to responding to new threats that are polymorphic and fast. ✅ When dealing with vast arrays of data, threat intelligence helps with the crucial aspect of prioritizing security alerts. ✅ In the often underestimated supply chain, it's important to know exactly who you are dealing with. Liran Cohen Beatrice Fissi #CyberData #ThreatIntelligence #SupplyChain

From the battlefield to the boardroom, and from startups to global enterprises, the impact of Israeli military training is profound, cultivating not just skilled soldiers but pioneers of industry and innovation. The IDF transcends traditional boundaries, transforming young recruits from students into teachers of life's toughest lessons. This rigorous journey does more than prepare soldiers for defense; it molds them into future leaders, innovators, and pivotal contributors in various sectors globally. Featuring Yochai Corem from Cyberint. Hosted by Yoel Israel.

Well, RSA has been fun folks. It's been a whirlwind of an event, from a buzzing booth with interest from a wide range of people - threat intel experts to MSSPs. Cyberint ended off RSA with a view at the Cityscape Skybar. Located 46 stories above the streets of Union Square, Cityscape is the highest Skybar in San Francisco, offering 360° views of the city. We enjoyed an evening with locally-inspired craft cocktails, top-shelf spirits, small plates, and the best beers and wines. It was great seeing you Fortified Health Security, Roush, NVIDIA, EVOTEK and many others. We're already looking forward to next year! #RSAC #RSAC2024 #ThreatIntelligence Yochai Corem Shai Yatzkan Danny Miller Adam Rollins Tyler Giannelli Avi Mileguir Ophir Bleiberg

Huge thanks to our partner DigitalEra Group and the Florida Institute of Technology for a great event earlier this week - the Secure Miami Conference. With over 400 attendees, the event focused on 12 conference tracks, highlighting areas like cyber security's role in AI and lessons learned from recent breaches. The highlight of the conference was the "Incident Response and Cyber Resilience: Lessons Learned from Recent Breaches" panel session with our very own Ken Towne, Kevin Kirkwood, Deputy CISO at LogRhythm, and Derek Loomis, Sr. Project at Ordr Inc., and moderated by Dr. Natalie Foster Johnson from Broward County Aviation. #CyberResilience #SecureMiami

𝐋𝐨𝐜𝐤𝐁𝐢𝐭𝐒𝐮𝐩𝐩 𝐈𝐝𝐞𝐧𝐭𝐢𝐭𝐲 𝐑𝐞𝐯𝐞𝐚𝐥𝐞𝐝 The UK, US, and Australia have revealed the identity of Dmitry Khoroshev, a Russian national and the leader of the once-notorious LockBit ransomware group, following an international disruption campaign led by the National Crime Agency (NCA). He is charged by a 26-count indictment returned by a grand jury in the District of New Jersey. LockBit has launched a new leak site where they have exaggerated their activity by listing victims targeted before the NCA gained control of their services in February, and have also claimed responsibility for attacks carried out using other ransomware strains. Data indicates that the average monthly number of LockBit attacks in the UK has decreased by 73% since the actions taken in February, with similar reductions reported in other countries. These attacks appear to be conducted by less sophisticated affiliates resulting in lower impact. Read more: https://bit.ly/4b4NOX2 #LockBit #OperationCronos #Ransomware