Nomios

Nomios and Nokia proudly present the 𝗧𝗵𝗲 𝗖𝗼𝗻𝗻𝗲𝗰𝘁𝗶𝗻𝗴 𝗘𝘂𝗿𝗼𝗽𝗲 𝗧𝗼𝘂𝗿! Join Nat and Fraser, two young and curious entrepreneurs on an exciting journey across Europe, as they dive into the world of cutting-edge technology and innovation. In this first episode they visit London and Cambridge to talk to: 🔸 Jordan A., Services Directon from Nomios UK&I 🔸 Bram Peeters, Chief Network Operations Officer from GÉANT 🔸 Mateja Jamnik, Professor of Artificial Intelligence at the University of Cambridge 🔸 Chiara Ciccarelli, Professor of Physics at the University of Cambridge This is a four-episode series, that explores the backbone of European research and education—the GÉANT network. Next up: Paris and Brussels!

This week, we uncover 10 critical cybersecurity developments ranging from vulnerabilities in GPU systems and ransomware targeting healthcare to innovative phishing tactics and AI-driven disinformation campaigns. 1️⃣ Critical GPU DDK Vulnerabilities Flaws in GPU Driver Development Kits expose physical memory to attackers. Enterprises must patch immediately to secure AI and data centre systems. Source: Cybersecuritynews.com 2️⃣ Fintech Giant Finastra Data Breach Sensitive data from a major financial software provider is being sold on the dark web. A stark warning for enterprise supply chain security. Source: Krebsonsecurity.com 3️⃣ BootKitty UEFI Malware This first-of-its-kind Linux bootkit exploits firmware vulnerabilities to bypass Secure Boot protections. Linux administrators take note. Source: Bleepingcomputer.com 4️⃣ AWS Launches Incident Response Service A game-changing service to streamline and enhance enterprise-level security event responses. Source: Securityweek.com 5️⃣ Hackers Exploit Webcam Vulnerability Privacy risks emerge as attackers bypass LED indicators to activate laptop webcams covertly. Source: Cybersecuritynews.com 6️⃣ AI-Powered Fake News Campaign A Russian influence operation targets Western support for Ukraine and U.S. elections, amplifying political tensions through AI. Source: TheHackerNews 7️⃣ SpyLoan Malware Hits 8 Million Android Users Malicious apps on Google Play extort and harass victims, showcasing the dangers of unchecked app permissions. Source: TheHackerNews 8️⃣ Banshee Stealer macOS Malware Source Code Leaked Widespread attacks are now possible after the code for this data-theft malware was made public. Source: Securityweek.com 9️⃣ Cyberattacks on UK Hospitals Ransomware disrupts healthcare services, underlining the vulnerabilities in critical infrastructure. Source: Securityweek.com 🔟 Blue Yonder Ransomware Attack Disrupts UK Retailers A ransomware attack on supply chain software provider Blue Yonder is causing significant disruptions for UK supermarkets and retailers, highlighting supply chain vulnerabilities during critical seasons. Source: Computerweekly.com These updates underline the growing complexity of cybersecurity challenges across hardware, software, and infrastructure. Enterprises must remain proactive by adopting robust security measures and staying informed about emerging threats. At Nomios, we provide bespoke cybersecurity solutions tailored to large organisations. If you have any questions or need expert guidance, please contact our team. Together, we can fortify your defences and secure your enterprise in this digital landscape.

Nomios Weekly CyberWednesday Update (20.11 - 27.11)🚨 Check here the top 10 cybersecurity updates of this week 👇 𝟭. 𝗥𝘂𝘀𝘀𝗶𝗮𝗻 𝗛𝗮𝗰𝗸𝗲𝗿𝘀 𝗗𝗲𝗽𝗹𝗼𝘆 𝗛𝗔𝗧𝗩𝗜𝗕𝗘 𝗮𝗻𝗱 𝗖𝗛𝗘𝗥𝗥𝗬𝗦𝗣𝗬 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - APT28-linked threat actors are targeting European government entities and educational institutions using custom malware. These attacks are part of a broader Russian strategy to destabilise NATO countries. Source: The Hacker News 𝟮. 𝗖𝗵𝗶𝗻𝗮-𝗕𝗮𝗰𝗸𝗲𝗱 𝗛𝗮𝗰𝗸𝗲𝗿𝘀 𝗘𝘅𝗽𝗹𝗼𝗶𝘁 𝗦𝗜𝗚𝗧𝗥𝗔𝗡 𝗣𝗿𝗼𝘁𝗼𝗰𝗼𝗹𝘀 𝘁𝗼 𝗜𝗻𝗳𝗶𝗹𝘁𝗿𝗮𝘁𝗲 𝗧𝗲𝗹𝗲𝗰𝗼𝗺 𝗡𝗲𝘁𝘄𝗼𝗿𝗸𝘀 - Liminal Panda is leveraging deep knowledge of telecom protocols to compromise networks across South Asia, Africa, and beyond. This highlights critical risks for telecom enterprises globally. Source: The Hacker News 𝟯. 𝗡𝗼𝗿𝘁𝗵 𝗞𝗼𝗿𝗲𝗮𝗻 𝗛𝗮𝗰𝗸𝗲𝗿𝘀 𝗦𝘁𝗲𝗮𝗹 $𝟭𝟬𝗠 𝘃𝗶𝗮 𝗟𝗶𝗻𝗸𝗲𝗱𝗜𝗻 𝗔𝗜-𝗗𝗿𝗶𝘃𝗲𝗻 𝗦𝗰𝗮𝗺𝘀 - Using fake recruiter profiles and advanced malware, North Korean hackers are stealing cryptocurrency and credentials, posing a growing threat to enterprises worldwide. Source: The Hacker News 𝟰. 𝗖𝗜𝗦𝗔 𝗪𝗮𝗿𝗻𝘀 𝗼𝗳 𝗩𝗠𝘄𝗮𝗿𝗲 𝘃𝗖𝗲𝗻𝘁𝗲𝗿 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗨𝗻𝗱𝗲𝗿 𝗔𝗰𝘁𝗶𝘃𝗲 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 - Critical flaws in VMware’s vCenter Server allow remote code execution and privilege escalation. European enterprises are urged to patch immediately to prevent attacks on virtualised infrastructure. Source: CyberSecurityNews 𝟱. 𝗢𝗿𝗮𝗰𝗹𝗲 𝗣𝗮𝘁𝗰𝗵𝗲𝘀 𝗔𝗴𝗶𝗹𝗲 𝗣𝗟𝗠 𝗭𝗲𝗿𝗼-𝗗𝗮𝘆 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱 𝗶𝗻 𝘁𝗵𝗲 𝗪𝗶𝗹𝗱 - A zero-day exploit in Agile PLM software risks sensitive data. Update now to secure legacy systems. Source: SecurityWeek 𝟲. 𝗚𝗼𝘃𝗲𝗿𝗻𝗺𝗲𝗻𝘁𝘀 𝗖𝗮𝗹𝗹 𝗳𝗼𝗿 𝗦𝘁𝗿𝗼𝗻𝗴𝗲𝗿 𝗘𝗨 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗔𝗴𝗲𝗻𝗰𝘆 𝗘𝗡𝗜𝗦𝗔 - Governments call for expanded ENISA resources to tackle critical infrastructure threats. Source: Euronews 𝟳. 𝗔𝗽𝗽𝗹𝗲 𝗖𝗼𝗻𝗳𝗶𝗿𝗺𝘀 𝗭𝗲𝗿𝗼-𝗗𝗮𝘆 𝗔𝘁𝘁𝗮𝗰𝗸𝘀 𝗛𝗶𝘁𝘁𝗶𝗻𝗴 𝗺𝗮𝗰𝗢𝗦 𝗦𝘆𝘀𝘁𝗲𝗺𝘀 - MacOS zero-day flaws are being actively targeted. Users are urged to update their systems. Source: SecurityWeek 𝟴. 𝗥𝘂𝘀𝘀𝗶𝗮𝗻 𝗡𝗲𝗮𝗿𝗲𝘀𝘁 𝗡𝗲𝗶𝗴𝗵𝗯𝗼𝘂𝗿 𝗪𝗶-𝗙𝗶 𝗔𝘁𝘁𝗮𝗰𝗸 𝗘𝘅𝗽𝗼𝘀𝗲𝘀 𝗡𝗲𝘄 𝗘𝘀𝗽𝗶𝗼𝗻𝗮𝗴𝗲 𝗥𝗶𝘀𝗸𝘀 - APT28's "Nearest Neighbour Attack" exploits nearby networks, emphasising the need for wireless security. Source: SecurityWeek 𝟵. 𝗦𝗲𝗰𝘂𝗿𝗲 𝗯𝘆 𝗗𝗲𝗺𝗮𝗻𝗱: 𝗘𝗻𝘀𝘂𝗿𝗶𝗻𝗴 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗦𝘂𝗽𝗽𝗹𝘆 𝗖𝗵𝗮𝗶𝗻 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 - Proactive security validation is essential to protect against supply chain attacks. Source: DarkReading 𝟭𝟬. 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝘅𝗽𝗼𝘀𝗲𝘀 𝗢𝗡𝗡𝗫 𝗣𝗵𝗶𝘀𝗵𝗶𝗻𝗴 𝗦𝗲𝗿𝘃𝗶𝗰𝗲, 𝗦𝗲𝗶𝘇𝗲𝘀 𝟮𝟰𝟬 𝗗𝗼𝗺𝗮𝗶𝗻𝘀 - 240 domains seized in a takedown of phishing-as-a-service schemes, exposing key operators. Source: DarkReading For more in-depth details, check the comments for a link to our dedicated pages! 🚀

We had an inspiring and interactive workshop with Nokia at Nomios, focusing on the 𝗡𝗼𝗸𝗶𝗮 𝗗𝗮𝘁𝗮 𝗖𝗲𝗻𝘁𝗲𝗿 𝗙𝗮𝗯𝗿𝗶𝗰 𝘀𝗼𝗹𝘂𝘁𝗶𝗼𝗻 and bringing shared values to life for our customers. It was a dynamic session filled with collaborative activities, meaningful discussions, and innovative ideas around automation, openness, differentiation, and flexibility. Together, we explored practical ways to infuse core values into every customer touchpoint, enhancing trust and building lasting connections. A big thank you for this dedicated engagement and enthusiasm. Let’s continue this journey to create impactful customer experiences driven by our shared values!

🚨 Nomios Weekly CyberWednesday Update (13.11 - 20.11)🚨 Check here the top 10 cybersecurity updates of this week 👇 𝟭. 𝗣𝗔𝗡-𝗢𝗦 𝗙𝗶𝗿𝗲𝘄𝗮𝗹𝗹 𝗭𝗲𝗿𝗼-𝗗𝗮𝘆 𝗔𝗰𝘁𝗶𝘃𝗲𝗹𝘆 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱 - Palo Alto Networks has patched a critical firewall flaw allowing attackers to deploy web shells for persistent access. Immediate updates are strongly advised. (Source: The Hacker News) 𝟮. 𝗙𝗼𝗿𝘁𝗶𝗻𝗲𝘁 𝗩𝗣𝗡 𝗭𝗲𝗿𝗼-𝗗𝗮𝘆 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱 𝗯𝘆 𝗗𝗲𝗲𝗽𝗗𝗮𝘁𝗮 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - APT41 is exploiting an unpatched zero-day in Fortinet’s Windows VPN client to steal credentials. Monitor systems and apply mitigations. (Source: SecurityWeek) 𝟯. 𝗚𝗲𝗿𝗺𝗮𝗻𝘆 𝗣𝗿𝗲𝗽𝗮𝗿𝗲𝘀 𝗳𝗼𝗿 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁𝘀 𝗔𝗺𝗶𝗱 𝗦𝗻𝗮𝗽 𝗘𝗹𝗲𝗰𝘁𝗶𝗼𝗻𝘀 - Germany braces for disinformation and advanced cyberattacks during upcoming elections, citing high threat levels due to APT activity and geopolitical tensions. (Source: Euronews) 𝟰. 𝗩𝗠𝘄𝗮𝗿𝗲 𝘃𝗖𝗲𝗻𝘁𝗲𝗿 𝗦𝗲𝗿𝘃𝗲𝗿 𝗕𝘂𝗴 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱 𝗶𝗻 𝘁𝗵𝗲 𝗪𝗶𝗹𝗱 - A critical vulnerability in VMware’s vCenter Server allows remote code execution. Live attacks detected—update to secure versions immediately. (Source: SecurityWeek) 𝟱. 𝗦𝗶𝘁𝘁𝗶𝗻𝗴 𝗗𝘂𝗰𝗸𝘀 𝗔𝘁𝘁𝗮𝗰𝗸 𝗣𝘂𝘁𝘀 𝟭𝗠 𝗗𝗼𝗺𝗮𝗶𝗻𝘀 𝗮𝘁 𝗥𝗶𝘀𝗸 - DNS misconfigurations are being exploited to hijack domains for phishing, fraud, and malware distribution. At least 70,000 domains have already been compromised. (Source: Cybersecurity News) 𝟲. 𝗣𝗼𝘀𝘁𝗴𝗿𝗲𝗦𝗤𝗟 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗘𝗻𝗮𝗯𝗹𝗲𝘀 𝗖𝗼𝗱𝗲 𝗘𝘅𝗲𝗰𝘂𝘁𝗶𝗼𝗻 - A newly patched PostgreSQL flaw (CVE-2024-10979) allows code execution via environment variable manipulation. Update to the latest secure versions now. (Source: The Hacker News) 𝟳. 𝗜𝗿𝗮𝗻𝗶𝗮𝗻 𝗛𝗮𝗰𝗸𝗲𝗿𝘀 𝗗𝗲𝗽𝗹𝗼𝘆 𝗪𝗲𝘇𝗥𝗮𝘁 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 𝗶𝗻 𝗣𝗵𝗶𝘀𝗵𝗶𝗻𝗴 𝗖𝗮𝗺𝗽𝗮𝗶𝗴𝗻𝘀 - Iranian APTs are targeting Israeli organisations with WezRat malware, enabling remote surveillance and command execution via phishing emails. (Source: The Hacker News) 𝟴. 𝗧-𝗠𝗼𝗯𝗶𝗹𝗲 𝗛𝗶𝘁 𝗶𝗻 𝗖𝗵𝗶𝗻𝗲𝘀𝗲 𝗖𝘆𝗯𝗲𝗿𝗲𝘀𝗽𝗶𝗼𝗻𝗮𝗴𝗲 𝗖𝗮𝗺𝗽𝗮𝗶𝗴𝗻- Chinese hackers infiltrated multiple US telecoms, including T-Mobile, targeting sensitive call and law enforcement data. T-Mobile reports no significant impact. (Source: SecurityWeek) 𝟵. 𝗖𝗵𝗮𝘁𝗚𝗣𝗧 𝗣𝗿𝗼𝗺𝗽𝘁 𝗜𝗻𝗷𝗲𝗰𝘁𝗶𝗼𝗻 𝗥𝗮𝗶𝘀𝗲𝘀 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗼𝗻𝗰𝗲𝗿𝗻𝘀 - Mozilla researchers expose how prompt injection vulnerabilities in ChatGPT could leak sensitive configurations, raising concerns for enterprise use. (Source: Dark Reading) 𝟭𝟬. 𝗧𝗿𝘂𝗺𝗽 𝗔𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗶𝗼𝗻 𝗖𝗼𝘂𝗹𝗱 𝗦𝗵𝗶𝗳𝘁 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗙𝗼𝗰𝘂𝘀 - Expect less regulation but increased focus on critical infrastructure protection and trade-related cybersecurity under the incoming Trump administration. (Source: Dark Reading) For more in-depth details, check the comments for a link to our dedicated page! 🚀

Organisations face a multitude of cybersecurity challenges, from the rise of generative AI and machine learning to the impending impact of quantum computing. The threat landscape is becoming increasingly complex. A more potent dimension we face is Cybercrime as a Service (CaaS). This has enabled criminal and state actors to offload their sabotage work to cybercrime professionals.  In his latest article, Usman Khan, our Solution Lead Cybersecurity, dives deep into these pressing issues. His insights highlight not only the challenges but also the strategies organisations can adopt to stay ahead in this fast-changing environment.🔒 Read the full article to learn more about how we can help you navigate these complexities: https://lnkd.in/eTBq_x-B.

Our Nomios team in Costa Rica usually keeps things running while Europe sleeps 😴. But this week, part of the Costa Rica crew visited our Dutch office! They shared knowledge, insights and experiences with their Dutch colleagues—both in the office 💼 and out in the charming streets of Leiden. And, in true Dutch style, they even hopped on bikes 🚲 for a local adventure! We can't wait to meet our other Costa Rica colleagues in January!

📢 Serdecznie zapraszamy na Nomios Security Day, gdzie skupimy się na najnowszych rozwiązaniach w obszarze cyberbezpieczeństwa! To doskonała okazja, aby zgłębić technologie, które zabezpieczają środowiska IT przed nowymi zagrożeniami i podnieść poziom ochrony w organizacji. Czeka nas dzień pełen inspirujących prelekcji i pokazów demo z udziałem ekspertów w branży. DATA: 28.11.2024 GODZINA: 9:30-21:00 MIEJSCE: NINE's Restaurant & Sports Bar, Warszawa Zarejestruj się, jeśli chcesz się dowiedzieć: ➡️ Jak zarządzać i analizować incydenty bezpieczeństwa z użyciem FortiAnalyzer i FortiSIEM. ➡️ W jaki sposób rozwiązania CrowdStrike wspierają wykrywanie i odpowiedź na zagrożenia. ➡️ Jak skutecznie automatyzować reakcje na incydenty dzięki FortiSOAR. Pełna agenda oraz formularz rejestracyjny: https://lnkd.in/ekx4-9dp *udział w wydarzeniu jest bezpłatny! Do zobaczenia! Partnerzy wydarzenia: Arrow Electronics CrowdStrike Fortinet #Nomios #Arrow #Crowdstrike #Fortinet #Konferencja #Cyberbezpieczenstwo

🚨 Nomios Weekly CyberWednesday Update (06.11 - 13.11)🚨 Check here the top 10 cybersecurity updates of this week 👇 𝟭. 𝗖𝗥𝗢𝗡# 𝗧𝗥𝗔𝗣 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 𝗜𝗻𝗳𝗲𝗰𝘁𝘀 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝘃𝗶𝗮 𝗟𝗶𝗻𝘂𝘅 𝗩𝗠 𝗕𝗮𝗰𝗸𝗱𝗼𝗼𝗿 - The CRON#TRAP campaign uses a Linux virtual instance on Windows to evade antivirus detection, creating a stealthy backdoor for attackers. (Source: The Hacker News) 𝟮. 𝗩𝗲𝗲𝗮𝗺 𝗣𝗮𝘁𝗰𝗵𝗲𝘀 𝗛𝗶𝗴𝗵-𝗦𝗲𝘃𝗲𝗿𝗶𝘁𝘆 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗔𝗺𝗶𝗱 𝗘𝘅𝗽𝗮𝗻𝗱𝗶𝗻𝗴 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Veeam released a hotfix to address a high-severity vulnerability in its Backup Enterprise Manager after recent exploits of similar flaws in ransomware attacks. (Source: SecurityWeek) 𝟯. 𝗣𝗔𝗡-𝗢𝗦 𝗥𝗖𝗘 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗘𝘅𝗽𝗼𝘀𝗲𝘀 𝟭𝟭,𝟬𝟬𝟬+ 𝗙𝗶𝗿𝗲𝘄𝗮𝗹𝗹 𝗜𝗻𝘁𝗲𝗿𝗳𝗮𝗰𝗲𝘀 - Palo Alto Networks warns of a potential RCE vulnerability affecting PAN-OS firewall interfaces. (Source: CybersecurityNews) 𝟰. 𝗙𝗹𝗲𝘅𝗶𝗯𝗹𝗲 𝗭𝗶𝗽 𝗔𝗿𝗰𝗵𝗶𝘃𝗲 𝗦𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱 𝘁𝗼 𝗘𝘃𝗮𝗱𝗲 𝗗𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 - Threat actors are leveraging Zip file concatenation to hide malware within archives, bypassing certain detection tools to deliver Trojan payloads. (Source: Dark Reading) 𝟱. 𝗗𝗲𝗹𝗹 𝗣𝗮𝘁𝗰𝗵𝗲𝘀 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗦𝗢𝗡𝗶𝗖 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗳𝗼𝗿 𝗘𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗡𝗲𝘁𝘄𝗼𝗿𝗸𝘀 - Dell has disclosed three high-severity vulnerabilities in its SONiC OS, each allowing command injection or bypassing authentication. (Source: CybersecurityNews) 𝟲. 𝗡𝗼𝗿𝘁𝗵 𝗞𝗼𝗿𝗲𝗮𝗻 𝗛𝗮𝗰𝗸𝗲𝗿𝘀 𝗗𝗲𝗽𝗹𝗼𝘆 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 𝗔𝗴𝗮𝗶𝗻𝘀𝘁 𝗺𝗮𝗰𝗢𝗦 𝗨𝘀𝗲𝗿𝘀 - North Korea’s BlueNoroff group targets cryptocurrency businesses with malicious macOS applications. (Source: SecurityWeek) 𝟳. 𝗥𝗲𝘃𝗮𝗺𝗽𝗲𝗱 𝗥𝗲𝗺𝗰𝗼𝘀 𝗥𝗔𝗧 𝗗𝗲𝗽𝗹𝗼𝘆𝗲𝗱 𝗔𝗴𝗮𝗶𝗻𝘀𝘁 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝗗𝗲𝘃𝗶𝗰𝗲𝘀 - Remcos RAT’s new variant is packed with evasion techniques, exploiting an RCE vulnerability in unpatched Microsoft Office and WordPad to take over devices. (Source: Dark Reading) 𝟴. 𝗔𝗻𝗱𝗿𝗼𝘅𝗚𝗵𝟬𝘀𝘁 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 𝗟𝗲𝘃𝗲𝗿𝗮𝗴𝗲𝘀 𝗠𝗼𝘇𝗶 𝗕𝗼𝘁𝗻𝗲𝘁 𝗳𝗼𝗿 𝗜𝗼𝗧 𝗔𝘁𝘁𝗮𝗰𝗸𝘀 - The AndroxGh0st malware now integrates Mozi botnet functionalities, increasing its reach across IoT devices through various known vulnerabilities. (Source: The Hacker News) 𝟵. 𝗠𝗮𝘇𝗱𝗮 𝗖𝗮𝗿 𝗜𝗻𝗳𝗼𝘁𝗮𝗶𝗻𝗺𝗲𝗻𝘁 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗔𝗹𝗹𝗼𝘄 𝗥𝗼𝗼𝘁 𝗖𝗼𝗱𝗲 𝗘𝘅𝗲𝗰𝘂𝘁𝗶𝗼𝗻 - Unpatched vulnerabilities in Mazda’s infotainment system could allow attackers to compromise the vehicle through a crafted USB device. (Source: SecurityWeek) 𝟭𝟬. 𝗖𝘆𝗯𝗲𝗿𝗮𝘁𝘁𝗮𝗰𝗸 𝗖𝗼𝘀𝘁𝘀 𝗛𝗮𝗹𝗹𝗶𝗯𝘂𝗿𝘁𝗼𝗻 $𝟯𝟱𝗠 𝗶𝗻 𝗟𝗼𝘀𝘀𝗲𝘀 - The recent attack on Halliburton resulted in significant losses, underscoring the impact of ransomware on corporate finances. (Source: SecurityWeek) For more in-depth details, check the comments for a link to our dedicated page! 🚀

🚨 Nomios Weekly CyberWednesday update (30.10 - 06.11)🚨 ! Every Wednesday, we bring you the top 10 most important updates in cybersecurity and networking. Stay informed with the latest news, threats, and developments to keep you ahead in the ever-evolving digital landscape. 👇 Top 10 cybersecurity updates: 𝟭. 𝗔𝗻𝗱𝗿𝗼𝗶𝗱 𝗭𝗲𝗿𝗼-𝗗𝗮𝘆 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱, 𝗨𝗿𝗴𝗲𝗻𝘁 𝗣𝗮𝘁𝗰𝗵 𝗡𝗲𝗲𝗱𝗲𝗱 - Two zero-day flaws in Qualcomm chipsets are being actively exploited. Users should update immediately. (Source: Cybersecuritynews) 𝟮. 𝗡𝗖𝗦𝗖, 𝗦𝗼𝗽𝗵𝗼𝘀, 𝗮𝗻𝗱 𝗙𝗕𝗜 𝗥𝗲𝘃𝗲𝗮𝗹 𝗦𝗼𝗽𝗵𝗶𝘀𝘁𝗶𝗰𝗮𝘁𝗲𝗱 𝗖𝗵𝗶𝗻𝗲𝘀𝗲 𝗔𝘁𝘁𝗮𝗰𝗸𝘀 - Chinese state-backed hackers have exploited zero-day vulnerabilities in Sophos XG and FortiGate firewalls. Sophos reports a years-long struggle, and the FBI seeks assistance. (Source: SecurityWeek) 𝟯. 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗪𝗮𝗿𝗻𝘀 𝗼𝗳 𝗖𝗵𝗶𝗻𝗲𝘀𝗲 𝗕𝗼𝘁𝗻𝗲𝘁 𝗧𝗮𝗿𝗴𝗲𝘁𝗶𝗻𝗴 𝗥𝗼𝘂𝘁𝗲𝗿𝘀 - Microsoft reports that a Chinese botnet is using password spray attacks to steal credentials, exploiting flaws in routers and VPNs. (Source: The Hacker News) 𝟰. 𝗠𝗮𝘀𝘀𝗶𝘃𝗲 𝗚𝗶𝘁 𝗖𝗼𝗻𝗳𝗶𝗴 𝗕𝗿𝗲𝗮𝗰𝗵 𝗘𝘅𝗽𝗼𝘀𝗲𝘀 𝟭𝟱,𝟬𝟬𝟬 𝗖𝗿𝗲𝗱𝗲𝗻𝘁𝗶𝗮𝗹𝘀 - The EMERALDWHALE campaign has targeted exposed Git configurations, stealing credentials and cloning thousands of private repositories. (Source: The Hacker News) 𝟱. 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀𝗲𝘀 𝗧𝗮𝗿𝗴𝗲𝘁𝗲𝗱 𝗶𝗻 𝗟𝗮𝗿𝗴𝗲-𝗦𝗰𝗮𝗹𝗲 𝗖𝗵𝗮𝘁𝗚𝗣𝗧 𝗣𝗵𝗶𝘀𝗵𝗶𝗻𝗴 - Barracuda Networks has detected a global phishing campaign impersonating OpenAI, aiming to steal ChatGPT credentials. (Source: SecurityWeek) 𝟲. 𝗡𝗼𝗿𝘁𝗵 𝗞𝗼𝗿𝗲𝗮𝗻 𝗚𝗿𝗼𝘂𝗽 𝗖𝗼𝗹𝗹𝗮𝗯𝗼𝗿𝗮𝘁𝗲𝘀 𝘄𝗶𝘁𝗵 𝗣𝗹𝗮𝘆 𝗥𝗮𝗻𝘀𝗼𝗺𝘄𝗮𝗿𝗲 - The North Korean APT group Jumpy Pisces partners with Play ransomware, marking an alarming new collaboration. (Source: The Hacker News) 𝟳. 𝗛𝗮𝗰𝗸𝗶𝗻𝗴 𝘄𝗶𝘁𝗵 𝗔𝗜 𝗨𝘀𝗶𝗻𝗴 𝗪𝗵𝗶𝘁𝗲𝗥𝗮𝗯𝗯𝗶𝘁𝗡𝗲𝗼 - The WhiteRabbitNeo AI tool is revolutionising offensive cybersecurity by simulating attacks with AI speed. Experts warn of its dual-use potential for malicious purposes. (Source: SecurityWeek) 𝟴. 𝗢𝗪𝗔𝗦𝗣 𝗕𝗲𝗲𝗳𝘀 𝗨𝗽 𝗚𝗲𝗻𝗔𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗚𝘂𝗶𝗱𝗮𝗻𝗰𝗲 𝗔𝗺𝗶𝗱 𝗗𝗲𝗲𝗽𝗳𝗮𝗸𝗲 𝗦𝘂𝗿𝗴𝗲 - OWASP has released new guidance to defend against AI-based threats, like deepfake scams, as incidents rise. (Source: DarkReading) 𝟵. 𝗡𝗲𝘄 𝗟𝗶𝗴𝗵𝘁𝗦𝗽𝘆 𝗦𝗽𝘆𝘄𝗮𝗿𝗲 𝗩𝗲𝗿𝘀𝗶𝗼𝗻 𝗧𝗮𝗿𝗴𝗲𝘁𝘀 𝗶𝗣𝗵𝗼𝗻𝗲𝘀 - An upgraded LightSpy version can exfiltrate data and even prevent devices from booting, using known iOS vulnerabilities. (Source: The Hacker News) 𝟭𝟬. 𝗡𝗼𝗸𝗶𝗮 𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝗻𝗴 𝗔𝗹𝗹𝗲𝗴𝗲𝗱 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵 𝗯𝘆 𝗜𝗻𝘁𝗲𝗹𝗕𝗿𝗼𝗸𝗲𝗿 - Nokia is looking into claims of a data breach involving stolen source code, which could impact telecom infrastructure. (Source: Cybersecuritynews) For more in-depth details, check the comments for a link to our dedicated pages! 🚀