By security practitioners, for security practitioners novacoast federal | Pillr | novacoast | about innovate

Hand-Picked Top-Read Stories

Beyond Mobile Authentication: Exploring Complex Environments MFA Solutions

Preview

byInnovate Cybersecurity

December 6, 2023 11:30 GMT

3 minute read

Weekly Top 10 – 12.04.2023- Google Patches the Sixth Chrome Zero-Day of 2023, Okta Breach Impacts All Users Who Worked with Support, Sinbad Bitcoin Mixer Seized, and more.

December 4, 2023 15:00 GMT

4 minute read

Social engineering has become a popular tactic among cybercriminals to gain access to networks since most organizations have implemented zero-trust mechanisms. Driving them to use tactics such as business email compromise and phishing, smishing, and vishing campaigns. The hacker collective Scattered Spider is known to use social engineering tactics. The recent attacks against MGM Casino and Caesars Entertainment were attributed to the group. During these attacks, it encrypted systems using the BlackCat/ALPHV locker.

Tactics, Techniques, and Procedures of Cyberattacks

Preview

byInnovate Cybersecurity

December 1, 2023 17:50 GMT

5 minute read

Trending Tags

By security practitioners, for security practitioners

2024

Innovate

Cybersecurity Summit

February 25-27, 2024 – Nashville, TN

Visit Event Site

Innovator Series EP2: Masha Sedova of Elevate Security

Innovator Series EP1: Lior Yaari of Grip Security

In this inaugural episode of the Innovator Video Series, we chat with Lior Yaari, CEO and…

Current Dependency Vulnerabilities Giving Us PTSD

Lately, it seems we’re all plagued by zero-day and dependency-related vulnerabilities.…

Cybersecurity Industry News

Current Dependency Vulnerabilities Giving Us PTSD

October 17, 2023 09:35 GMT

Meta’s Q2 2023 Adversarial Threat Report: What You Should Know

September 29, 2023 10:19 GMT

Fed Updates: What You Need to Know About Semiconductor Chips and AI

September 27, 2023 21:00 GMT

How Useful Is AI? It Depends On How Experienced You Are.

September 20, 2023 17:21 GMT

The Role of Cyber Hygiene in Protecting Data

September 5, 2023 14:57 GMT

New Multistage Adversary in the Middle Attacks

New Multistage Adversary-In-The-Middle (AitM) Attacks

August 29, 2023 16:20 GMT

Meta’s Q1 2023 Adversarial Threat Report: What You Should Know

August 29, 2023 15:59 GMT

A woman security analyst working on stopping online fraud.

Stopping Online Fraud

August 29, 2023 15:58 GMT

Baselining Endpoint Risk

Baselining Endpoint Risk

August 21, 2023 16:36 GMT

Threat Advisories

See the Weekly Top Ten for cybersecurity news stories we found relevant over the last week. Updated on Fridays.

Weekly Top 10 – 12.04.2023- Google Patches the Sixth Chrome Zero-Day of 2023, Okta Breach Impacts All Users Who Worked with Support, Sinbad Bitcoin Mixer Seized, and more.

December 4, 2023 15:00 GMT

Weekly Top 10 – 11.20.2023- Maine State Census Breached, Security Flaw in Google Workspace, “Royal Ransomware” Possibly ReBranding, and more

November 20, 2023 15:00 GMT

Weekly Top 10 – 11.13.2023- New North Korean-Linked MacOS Malware, Google Calendar CNC Abuse

November 13, 2023 15:00 GMT

Weekly Top 10 – 11.06.2023- Threat Actors Use Credentials Scraped from GitHub for Crypto Mining, Infamous Mozi IOT Botnet Goes Dark, HelloKitty Ransomware Gang Leverages Vulnerabilities in Apache, Boeing Confirms Cyberattack and Lockbit Claims Responsibility

November 6, 2023 15:00 GMT

Weekly Top 10 – 10.30.2023- Critical Vulnerabilities in SolarWinds Access Rights Manager, Zero-Day in Roundcube Exploited by Nation State Actors, VMWare VCenter Security Flaw Patched in End-of-Life Products, Vulnerabilities in Google Chrome Lead to Remote Code Execution

October 30, 2023 15:00 GMT

Weekly Top 10 – 10.23.2023- Critical Vulnerability in Cisco IOS XE Leads to Over 30k Compromised Devices, Threat Actors Abuse Google Ads to Deliver Malware, QR Codes Used to Spread Malware and Steal Passwords, Coordinated Law Enforcement Effort Takes Down RagnarLocker Ransomware Gang

October 23, 2023 08:00 GMT

Weekly Top 10 – 10.16.2023- Critical Vulnerability in Cisco Emergency Responder Software, Desktop Linux Vulnerable to Remote Code Execution via LibCue, Vulnerability in Citrix NetScaler Login Pages Allows for Credential Theft, cURL Patches Two High-Severity Vulnerabilities

October 16, 2023 08:00 GMT

Weekly Top 10 – 10.9.2023- Zombie Zoom Links, Indeed.com Redirect Vulnerability Abused, CISA Adds Windows and JetBrains to KEV Catalogue, BING AI Convinced to Reveal CAPTCHA

October 9, 2023 06:00 GMT

Weekly Top 10 – 9.25.2023- CLOP Gang Stolen Data, New AMBERSQUID Cryptojacking Operation, Payment Card Skimming Campaign

September 25, 2023 09:00 GMT

Research

OpenAI Cybersecurity Research

December 22, 2022 14:00 GMT

Breach Report: Healthcare

February 17, 2022 17:49 GMT

Analysis of GalComm Chrome Extension Malware

February 7, 2022 16:28 GMT

University Researchers Pit Top 18 EDR Products Against Real-World Attacks

January 12, 2022 17:52 GMT

Endpoint Protection (EPP) & Endpoint Detection & Response (EDR) Efficacy Analysis

November 9, 2021 17:43 GMT

Cybersecurity Education

In addition to recent articles, check out our categorized Security Knowledge Guides

Protecting Microsoft Teams From Data Exfiltration – A Tactical DLP Rule

September 12, 2023 15:08 GMT

Anatomy of a Data Breach

August 24, 2023 15:17 GMT

Top 5 Best Security Practices For Microsoft Azure

August 11, 2023 18:09 GMT

Breaking Into A Cybersecurity Career As A Security Analyst

July 14, 2023 15:50 GMT

Verify Email Origin Authenticity By Implementing DMARC

February 28, 2023 16:22 GMT

Building a Foundational Data Classification Strategy

January 25, 2023 21:23 GMT

Common Pitfalls in Continuous Monitoring

September 26, 2022 19:19 GMT

How To Get the Most Out of Your Pen Test

May 3, 2022 20:27 GMT

Guide To Better Security Logging

March 14, 2022 15:22 GMT

Subscribe to receive periodic emails regarding the latest critical vulnerabilities and zero-day exploits as they emerge, with actionable guidance and tips.