NCSC Threat Report for 30 September 2022 – NCSC.GOV.UK
National Cyber Security Centre Threat Report 30 September 2022
Here is some of the open-source software I use – and it has all been targeted!
PuTTY, KiTTY and Sumatra PDF Reader – I did my due diligence before installing these – and now they have been targeted by ZINC, a state-sponsored group operating out of North Korea. ZINC weaponizing open-source software – Microsoft Security Blog Before writing this blog post I had checked my system …
Continue reading “Here is some of the open-source software I use – and it has all been targeted!”
NHS cyber-attack issue still continuing two months later…
Although the attack on NHS systems, back in August was contained, the systems hit are still not fully funstional: Oxford Health: Cyber attack continues to hit NHS trust’s services – BBC News The NHS 111 non-emergency/first call service was infected by ransomware and severely disrupted and the disruption is still …
Continue reading “NHS cyber-attack issue still continuing two months later…”
Back to the supply chain and software compromise
When a threat actor compromises the coding of software the problems can be widepread – the SolarWinds attack and subsequent distribution of the infected software through legitimate update channels is a classic example. (Ironic but the SolarWinds customers who avoided the attack, were those with a poor cyber security stance …
Continue reading “Back to the supply chain and software compromise”
If there is way for threat actors to abuse legitimate tools, of course they do it! No, it is not deja vu!
The headline equally applies to the abuse of LinkedIn Smart Links: LinkedIn Smart Links abused in evasive email phishing attacks (bleepingcomputer.com) This is a feature in the LinkedIn Sales Navigator and Enterprise versions and allows packages of documents to be sent out and the metrics for the documents can be …
