Maximilian Howell’s Post

Iranian hackers are going after critical infrastructure sector passwords, agencies caution: An international advisory says that the purpose of the “brute force” attacks is to sell the info to cybercrime forums. The post Iranian hackers are going after critical infrastructure sector passwords, agencies caution appeared first on CyberScoop. #cyber #cybersecurity #informationsecurity #management #Innovation #cloudsecurity #Technology #cyberjobs

Ransomware is a form of malicious software that infiltrates a computer or network and limits or restricts access to critical data by encrypting files until a ransom is paid. Ransomware attacks have been on the rise and continue to be a disruptive force in the cybersecurity industry, affecting everything from financial institutions to higher education. #cyberawareness #ransomwareriskassessment #ITeckSolutions https://lnkd.in/gAnhCK5S

Here's an outstanding article covering Iranian cyber attackers' TTPs and remediations to mitigate their unauthorized access to critical infrastructure. https://lnkd.in/g_SU_fEa

Iranian hackers are breaching critical infrastructure organizations to collect credentials and network data that can be sold on cybercriminal forums to enable cyberattacks from other threat actors. For daily news and analysis subscribe to the https://lnkd.in/gZsiTT2x newsletter. #CyberSecurity #Tech #DataProtection

The US Cybersecurity and Infrastructure Security Agency recently proposed new rules that would require hacked critical infrastructure operators to send the US federal government detailed reports describing network security breaches and ransom payments within a short time frame. The need to preventatively guard against potential cyber breaches is equally counterbalanced by the need for a quick incident response after cyberattacks, as malicious actors continue to adapt their ingenious ways of targeting organisations. That is why it is crucial that we ensure our rules and response frameworks are up to date, keeping up with the latest threat landscape. Read more here: https://lnkd.in/edkVv88w #Cybersecurity #US #Framework

#Cyberattack update: In a recent development regarding the #Avanti Connect Secure #vpn system breach in February 2024, it was found that attackers managed to steal "stored" credentials, allowing them to move laterally. This breach had a significant impact as the attackers exploited a vulnerability by sending malicious packets to the #VPN gateway, granting them access without the need for stolen credentials. The breach extended to exporting user credentials, including domain administrator credentials, affecting 102 federal civilian executive branch agencies. The investigation revealed that despite Ivanti's suggested mitigations, attackers could potentially maintain persistence within the system. Of particular concern was Ivanti's failure to detect the compromise promptly. This lapse enabled attackers to operate freely within a trusted zone, circumventing zero-trust principles and heightening the risks to sensitive data. This incident serves as a wake-up call, emphasizing the importance of robust cybersecurity measures. https://lnkd.in/gV4_gVNY) #CyberSecurity #DataBreach #CyberThreats #ITSecurity #CISAUpdate

📢 We tend to think internally about how we're protecting our most sensitive data; however, many times it's our suppliers that create the biggest risk. 👀 Sensitive Swiss federal government data, including classified documents and login credentials, were leaked by the Play ransomware group following an attack on IT service provider Xplain in 2023. An investigation by Switzerland’s National Cyber Security Centre (NCSC) 𝐫𝐞𝐯𝐞𝐚𝐥𝐞𝐝 𝐭𝐡𝐚𝐭 𝐚𝐫𝐨𝐮𝐧𝐝 65,000 𝐝𝐨𝐜𝐮𝐦𝐞𝐧𝐭𝐬 relating to the federal government were published by the attackers on the darknet on June 14, 2023. 𝐓𝐡𝐞 𝐒𝐰𝐢𝐬𝐬 𝐍𝐂𝐒𝐂 𝐝𝐢𝐬𝐜𝐨𝐯𝐞𝐫𝐞𝐝 𝐭𝐡𝐚𝐭 𝐩𝐞𝐫𝐬𝐨𝐧𝐚𝐥 𝐝𝐚𝐭𝐚, 𝐭𝐞𝐜𝐡𝐧𝐢𝐜𝐚𝐥 𝐢𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧, 𝐜𝐥𝐚𝐬𝐬𝐢𝐟𝐢𝐞𝐝 𝐝𝐚𝐭𝐚 𝐚𝐧𝐝 𝐩𝐚𝐬𝐬𝐰𝐨𝐫𝐝𝐬 𝐰𝐞𝐫𝐞 𝐡𝐞𝐥𝐝 𝐢𝐧 5182 𝐨𝐟 𝐭𝐡𝐞 𝐟𝐢𝐥𝐞𝐬. Seclore - Our comprehensive platform is deployed with over 2,000 customers to discover, classify, protect, control, trace, and securely share critical business information. #databreach #government

Iranian hackers are going after critical infrastructure sector passwords, agencies caution: An international advisory says that the purpose of the “brute force” attacks is to sell the info to cybercrime forums. The post Iranian hackers are going after critical infrastructure sector passwords, agencies caution appeared first on CyberScoop.

🔒🚨 Beware, IT pros and cyber warriors! Iranian hackers are on the prowl for critical infrastructure sector passwords! 💻🔐 Agencies warn that these cyber bandits are all about that “brute force” life, aiming to sell your info to the highest bidder in the shady cybercrime underworld. 🕵️♂️💰 🤔💭 Historical déjà vu, anyone? Remember when cyber threats were just a distant concern? Now they're knocking on our virtual doors, demanding our precious passwords like a cyber repo man! Time to step up our game, folks. ⚔️👨💻 🔍💡 Prediction time: brace yourselves for more sophisticated cyber-attacks! It’s like the hackers finally got their hands on a Cyber Attacker's How-To manual and decided to go all-in on their brute force bonanza. 💥💻 💬💡 Share your thoughts: How do you think this latest cyber saga will unfold? What strategies should cybersecurity pros implement to stay ahead of the hackers' dirty tricks? Let's brainstorm some digital defense tactics together! 🔒🧠 🔗 Read more about this cautionary tale here: [Iranian hackers are going after critical infrastructure sector passwords, agencies caution](https://buff.ly/3Ubx9us) via CyberScoop. Stay informed, stay vigilant! #ainews #automatorsolutions #cybersecurity #hackers #digitaldefense 🛡️🔒 #CyberSecurityAINews ----- Original Publish Date: 2024-10-16 11:06

Cybersecurity Alert ... Lessons Learned from the British Library Cyber-Attack On October 28th, 2023, the British Library faced a devastating cyber-attack by the Rhysida ransomware gang. The fallout was severe, compromising data, disrupting services, and exposing sensitive information. Here's what we can learn from this incident: 1️⃣ MFA Matters: Multi-Factor Authentication (MFA) is non-negotiable. Implement it across all endpoints to thwart cyber threats. Don't leave any entry point vulnerable. 2️⃣ Out with the Old: Legacy systems pose significant risks. Invest in modernizing infrastructure and applications to enhance security and streamline recovery efforts. 3️⃣ Personal Data, Professional Risk: Personal IT use policies matter. Clear guidelines can prevent personal data from becoming a liability during cyber-attacks. Educate staff on best practices. The British Library's experience underscores the importance of proactive cybersecurity measures. Let's fortify our defences and stay vigilant against evolving threats. #CyberSecurity #LessonsLearned #StaySafeOnline