Equifax fined £11 million by financial watchdog over 2017 cyber attack

The UK’s financial watchdog has fined Equifax £11 million for its role in one of the largest cyber attacks, which affected more than 13 million British consumers in 2017. The credit rating giant failed to keep its customers safe during Read More …

Cyber attack targets Medical Aid for Palestinians’ website amid Israel-Hamas conflict

In the midst of the ongoing conflict between Israel and Hamas, the Medical Aid for Palestinians organisation has reported a cyber attack on their website, which has disrupted their relief efforts for Gaza. They have also issued a warning that Read More …

Automatic disruption of human-operated attacks through containment of compromised user accounts

Based on incidents analyzed by Microsoft, it can take only a single hop from the attacker’s initial access vector to compromise domain admin-level accounts. For instance, an attacker can target an over-privileged service account configured in an outdated and vulnerable Read More …

Israelis Form Citizen Cyber Brigades Amid Mounting Digital Attacks

Israel’s large cybersecurity base is mobilizing to protect the country’s digital borders from hackers in the wake of a cross-border attack over the weekend that left more than 1,200 people dead and 100 more taken hostage. Members of the country’s Read More …

Assessed Cyber Structure and Alignments of North Korea in 2023

Historically Mandiant has made assessments on the Democratic People’s Republic of Korea’s (DPRK) cyber program based on Mandiant responses to intrusions, defector accounts, and OSINT reporting, in conjunction with government disclosures of DPRK units and motivation information. These assessments were Read More …

How it works: The novel HTTP/2 ‘Rapid Reset’ DDoS attack

A number of Google services and Cloud customers have been targeted with a novel HTTP/2-based DDoS attack which peaked in August. These attacks were significantly larger than any previously-reported Layer 7 attacks, with the largest attack surpassing 398 million requests Read More …

FBI and CISA Release Update on AvosLocker Advisory

Today, the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) released a joint Cybersecurity Advisory (CSA), #StopRansomware: AvosLocker Ransomware (Update) to disseminate known indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and detection methods Read More …

‘Gay furry hackers’ brag of second NATO break-in, steal and leak more data

On Sunday, the SiegedSec crew claimed it broke into six NATO web portals: the alliance’s Joint Advanced Distributed Learning e-learning website; the NATO Lessons Learned Portal, from which the gang said it stole 331 documents; the Logistics Network Portal (588 Read More …