Cyber – Page 187 – Welcome to APS Law

Mar

U.S. Charges 7 Chinese Nationals in Major 14-Year Cyber Espionage Operation

March 26, 2024Cyber

The U.S. Department of Justice (DoJ) on Monday unsealed indictments against seven Chinese nationals for their involvement in a hacking group that targeted U.S. and foreign critics, journalists, businesses, and political officials for about 14 years. The defendants include Ni Gaobin (倪高彬), Weng Ming (翁明), Cheng Feng (程锋), Peng Yaowen (彭耀文), Sun Xiaohui (孙小辉), Xiong...

Mar

Crafting Shields: Defending Minecraft Servers Against DDoS Attacks

March 26, 2024Cyber

Minecraft, with over 500 million registered users and 166 million monthly players, faces significant risks from distributed denial-of-service (DDoS) attacks, threatening server functionality, player experience, and the game’s reputation. Despite the prevalence of DDoS attacks on the game, the majority of incidents go unreported, leaving a gap in awareness and protection. This article explains

Mar

U.S. Sanctions 3 Cryptocurrency Exchanges for Helping Russia Evade Sanctions

March 26, 2024Cyber

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned three cryptocurrency exchanges for offering services used to evade economic restrictions imposed on Russia following its invasion of Ukraine in early 2022. This includes Bitpapa IC FZC LLC, Crypto Explorer DMCC (AWEX), and Obshchestvo S Ogranichennoy Otvetstvennostyu Tsentr Obrabotki Elektronnykh Platezhey (

Mar

CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products

March 26, 2024Cyber

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday placed three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities added are as follows – CVE-2023-48788 (CVSS score: 9.3) – Fortinet FortiClient EMS SQL Injection Vulnerability CVE-2021-44529 (CVSS score: 9.8) – Ivanti

Mar

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others

March 25, 2024Cyber

Unidentified adversaries orchestrated a sophisticated attack campaign that has impacted several individual developers as well as the GitHub organization account associated with Top.gg, a Discord bot discovery site. “The threat actors used multiple TTPs in this attack, including account takeover via stolen browser cookies, contributing malicious code with verified commits, setting up a custom

Mar

Key Lesson from Microsoft’s Password Spray Hack: Secure Every Account

March 25, 2024Cyber

In January 2024, Microsoft discovered they’d been the victim of a hack orchestrated by Russian-state hackers Midnight Blizzard (sometimes known as Nobelium). The concerning detail about this case is how easy it was to breach the software giant. It wasn’t a highly technical hack that exploited a zero-day vulnerability – the hackers used a simple password spray...

Mar

New “GoFetch” Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys

March 25, 2024Cyber

A new security shortcoming discovered in Apple M-series chips could be exploited to extract secret keys used during cryptographic operations. Dubbed GoFetch, the vulnerability relates to a microarchitectural side-channel attack that takes advantage of a feature known as data memory-dependent prefetcher (DMP) to target constant-time cryptographic implementations and capture sensitive data

Mar

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

March 25, 2024Cyber

The Iran-affiliated threat actor tracked as MuddyWater (aka Mango Sandstorm or TA450) has been linked to a new phishing campaign in March 2024 that aims to deliver a legitimate Remote Monitoring and Management (RMM) solution called Atera. The activity, which took place from March 7 through the week of March 11, targeted Israeli entities spanning global manufacturing,...

Mar

N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing Cyberattacks

March 24, 2024Cyber

The North Korea-linked threat actor known as Kimsuky (aka Black Banshee, Emerald Sleet, or Springtail) has been observed shifting its tactics, leveraging Compiled HTML Help (CHM) files as vectors to deliver malware for harvesting sensitive data. Kimsuky, active since at least 2012, is known to target entities located in South Korea as well as North America, Asia,...

Mar

German Police Seize ‘Nemesis Market’ in Major International Darknet Raid

March 24, 2024Cyber

German authorities have announced the takedown of an illicit underground marketplace called Nemesis Market that peddled narcotics, stolen data, and various cybercrime services. The Federal Criminal Police Office (aka Bundeskriminalamt or BKA) said it seized the digital infrastructure associated with the darknet service located in Germany and Lithuania and confiscated €94,000 ($102,107)

1 … 185 186 187 188 189 … 195

U.S. Charges 7 Chinese Nationals in Major 14-Year Cyber Espionage Operation

Crafting Shields: Defending Minecraft Servers Against DDoS Attacks

U.S. Sanctions 3 Cryptocurrency Exchanges for Helping Russia Evade Sanctions

CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others

Key Lesson from Microsoft’s Password Spray Hack: Secure Every Account

New “GoFetch” Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing Cyberattacks

German Police Seize ‘Nemesis Market’ in Major International Darknet Raid

Recent Posts

Recent Comments

Archives

Categories

Meta

Category

Recent Posts

Recent Comments

Archives

Categories

Meta