Cybersecurity Starts in the Boardroom
AlienFox is a malicious modular toolkit that threat actors can buy via a private Telegram channel. New AlienFox toolkit steals credentials for 18 cloud services (bleepingcomputer.com) The malware can be configured to scan for misconfigured servers and steal authentication details and credentials for a range of popular cloud-based services such …
Continue reading “Available for sale – a toolkit to steal credentials”
The US government Cybersecurity and Infrastructure Security Agency (CISA) is a great resource for keeping up with the issues with software you may be using. They have highlighted issues with Fortinet and security updates for Cisco: Fortinet Releases March 2023 Vulnerability Advisories | CISA Cisco Releases Security Advisory for IOS …
CISA Has Added One Known Exploited Vulnerability to Catalog | CISA
The Red Cross has tracked the cause of their hack to a vulnerability in the Zoho software they were using (CVE-2021-40539). Having bypassed the authentication processes, the attackers had administrator access to the system and compromised the online system that the Red Cross use to reconnect families separated in crisis …
