#dataexfiltration

0 posts0 participants0 posts today

G :donor: :Tick:I iz in ur logicappz, stealin ur secretz <a href="https://infosec.exchange/tags/SilentReaper" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SilentReaper</a> <a href="https://infosec.exchange/tags/Azure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Azure</a> <a href="https://infosec.exchange/tags/VulnNotVuln" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VulnNotVuln</a> <a href="https://infosec.exchange/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataExfiltration</a> <a href="https://infosec.exchange/tags/CredentialTheft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CredentialTheft</a> <a href="https://infosec.exchange/tags/Cloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cloud</a> <a href="https://infosec.exchange/tags/SecurityResearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityResearch</a> <a href="https://infosec.exchange/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a>Blog: <a href="https://cirriustech.co.uk/blog/azure-silent-reaper/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cirriustech.co.uk/blog/azure-silent-reaper/</a> Tools: <a href="https://github.com/Az-Skywalker/Az-Skywalker" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/Az-Skywalker/Az-Skywalker</a>

LorenzoChinese cybersecurity firm Sichuan Silence has been sanctioned for exploiting a vulnerability in Sophos firewalls used at critical infrastructure organizations in the U.S.<a href="https://poliverso.org/search?tag=china" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#china</a> <a href="https://poliverso.org/search?tag=dataexfiltration" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dataexfiltration</a> <a href="https://poliverso.org/search?tag=firewalls" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewalls</a> <a href="https://poliverso.org/search?tag=hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://poliverso.org/search?tag=ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ransomware</a> <a href="https://poliverso.org/search?tag=sichuansilence" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sichuansilence</a> <a href="https://poliverso.org/search?tag=sophos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sophos</a> <a href="https://poliverso.org/search?tag=usa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#usa</a> <a href="https://poliverso.org/search?tag=vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerabilities</a> <a href="https://www.techrepublic.com/article/sichuan-silence-sanction-us/" rel="nofollow noopener noreferrer" target="_blank">US Sanctions Chinese Cybersecurity Firm for 2020 Ransomware Attack</a>

HuntressKeep an eye on unexpected <a href="https://infosec.exchange/tags/WinRAR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WinRAR</a> activity—legitimate software doesn't always mean legitimate use. Identifying unusual command-line options can help uncover potential threats early. <a href="https://huntress.com/blog/its-not-safe-to-pay-safepay" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://huntress.com/blog/its-not-safe-to-pay-safepay</a> <a href="https://infosec.exchange/tags/ThreatHunting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatHunting</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataExfiltration</a>

Todd A. Jacobs | Pragmatic Cybersecurity<a href="https://infosec.exchange/@briankrebs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@briankrebs</a> The best way to prevent <a href="https://infosec.exchange/tags/dataexfiltration" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dataexfiltration</a> when breached is not to collect or store unnecessary data in the first place. That makes many of the current spate of <a href="https://infosec.exchange/tags/databreaches" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#databreaches</a> avoidable, self-inflicted incidents for which large companies are never held accountable in any truly meaningful way.You're spot on when you say that <a href="https://infosec.exchange/tags/databrokers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#databrokers</a> rely on large <a href="https://infosec.exchange/tags/datalakes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#datalakes</a> of sensitive data they don't need directly. They also rely on large data sets where any typical datum may be harmless in itself, but often becomes sensitive or dangerous when aggregated, and often exponentially more so when connected to intrinsically sensitive data such as <a href="https://infosec.exchange/tags/PII" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PII</a>, <a href="https://infosec.exchange/tags/PHI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PHI</a>, or identity.Setting aside the financial incentives and lack of accountability for the data brokers, how do <a href="https://infosec.exchange/tags/businessleaders" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#businessleaders</a>, <a href="https://infosec.exchange/tags/regulatoryagencies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#regulatoryagencies</a>, and <a href="https://infosec.exchange/tags/electedpoliticians" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#electedpoliticians</a> justify this state of affairs to you? It's not like the public and private sectors don't also have data they want to protect, so why allow this shadow industry to prosper? This seems even more mystifying when it's so clearly a double-edged sword even for the brokerages' paying customers!

Xavier «X» Santolaria :verified_paw: :donor:📨 Latest issue of my curated <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> and <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> list of resources for week #32/2023 is out! It includes the following and much more:➝ 🇨🇦 🦷 Nearly 1.5 million affected by data breach at Alberta Dental Service Corporation ➝ 🇺🇸 💳 EY breach exposes Bank of America customer credit card numbers ➝ 🇬🇧 🚔 Northern Ireland Police Officers Vulnerable After <a href="https://infosec.exchange/tags/DataLeak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataLeak</a> ➝ 🇬🇧 🔓 U.K. election admin agency <a href="https://infosec.exchange/tags/breach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#breach</a> exposed personal information of tens of millions voters ➝ 🇵🇱 🕵🏻‍♂️ <a href="https://infosec.exchange/tags/Spyware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Spyware</a> maker <a href="https://infosec.exchange/tags/LetMeSpy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LetMeSpy</a> shuts down after hacker deletes server data ➝ 🇨🇳 🔓 Researchers Shed Light on <a href="https://infosec.exchange/tags/APT31" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#APT31</a>'s Advanced Backdoors and <a href="https://infosec.exchange/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataExfiltration</a> Tactics ➝ 🛰️ 🇷🇺 <a href="https://infosec.exchange/tags/Satellite" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Satellite</a> hack on eve of <a href="https://infosec.exchange/tags/Ukraine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ukraine</a> war was a coordinated, multi-pronged assault ➝ 🇧🇾 🇷🇺 <a href="https://infosec.exchange/tags/Belarus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Belarus</a> hackers target foreign diplomats with help of local ISPs, researchers say ➝ 🎣 👮🏻‍♂️ <a href="https://infosec.exchange/tags/Interpol" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Interpol</a> takes down 16shop <a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a>-as-a-service platform ➝ 🇻🇳 💸 New <a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ransomware</a> gang emerges in <a href="https://infosec.exchange/tags/Vietnam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vietnam</a> ➝ 🇰🇵 🇷🇺 <a href="https://infosec.exchange/tags/Lazarus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Lazarus</a> hack Russian missile maker as <a href="https://infosec.exchange/tags/Moscow" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Moscow</a> pleas for shells ➝ 🇺🇸 👀 Cyber Safety Review Board to analyze cloud security in wake of Microsoft hack ➝ 🇮🇳 👨🏻‍⚖️ <a href="https://infosec.exchange/tags/India" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#India</a> Passes Data Protection Legislation in Parliament. Critics Fear <a href="https://infosec.exchange/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privacy</a> Violation ➝ 🇷🇺 🔐 Russia Starts Blocking <a href="https://infosec.exchange/tags/VPN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VPN</a> Protocols ➝ 🇨🇳 <a href="https://infosec.exchange/tags/China" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#China</a>-Linked Hackers Strike Worldwide: 17 Nations Hit in 3-Year Cyber Campaign ➝ 🇺🇸 🤖 White House launches <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> cyber challenge to identify and fix open-source software <a href="https://infosec.exchange/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerabilities</a> ➝ 🇷🇺 ✏️ <a href="https://infosec.exchange/tags/Russia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Russia</a> scrambles to hide sensitive data from investigative journalists ➝ 🏭 🚀 <a href="https://infosec.exchange/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> finds vulnerabilities it says could be used to shut down power plants ➝ 🇿🇦 ⚡️ New SystemBC <a href="https://infosec.exchange/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> Variant Targets Southern African Power Company ➝ 🦠 🧠 Meet the Brains Behind the Malware-Friendly AI Chat Service ‘<a href="https://infosec.exchange/tags/WormGPT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WormGPT</a>’ ➝ 🇫🇮 💸 The number of <a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ransomware</a> attacks targeting <a href="https://infosec.exchange/tags/Finland" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Finland</a> increased fourfold since it started the process to join <a href="https://infosec.exchange/tags/NATO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NATO</a> ➝ 👀 🤫 Popular <a href="https://infosec.exchange/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> project <a href="https://infosec.exchange/tags/Moq" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Moq</a> criticized for quietly collecting data ➝ 🇺🇸 🤖 Hacker vs. machine at <a href="https://infosec.exchange/tags/DEFCON" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DEFCON</a>: Thousands of security researchers vie to outsmart AI in Las Vegas ➝ 🐛 💻 “Downfall” bug affects years of <a href="https://infosec.exchange/tags/Intel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intel</a> <a href="https://infosec.exchange/tags/CPU" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPU</a>'s, can leak <a href="https://infosec.exchange/tags/encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#encryption</a> keys and more ➝ 🔐 🛡️ Bringing threat intelligence and adversary insights to the forefront: <a href="https://infosec.exchange/tags/XForce" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#XForce</a> Research Hub 📚 This week's recommended reading is: "Visual Threat Intelligence: An Illustrated Guide For Threat Researchers" by Thomas Roccia Subscribe to the <a href="https://infosec.exchange/tags/infosecMASHUP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosecMASHUP</a> newsletter to have it piping hot in your inbox every week-end ⬇️<a href="https://infosec-mashup.santolaria.net/p/infosec-mashup-week-322023" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://infosec-mashup.santolaria.net/p/infosec-mashup-week-322023</a>

Mufasa :sdf:A Republican poll worker charged with violating election law admitted he used a personal flash drive to export the electronic poll book at a Michigan precinct<a href="https://mastodon.sdf.org/tags/Michigan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Michigan</a> <a href="https://mastodon.sdf.org/tags/Republican" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Republican</a> <a href="https://mastodon.sdf.org/tags/PollWorker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PollWorker</a> <a href="https://mastodon.sdf.org/tags/DataExfiltration" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataExfiltration</a> <a href="https://mastodon.sdf.org/tags/USBFlashDrive" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USBFlashDrive</a> <a href="https://mastodon.sdf.org/tags/ElectionLaw" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ElectionLaw</a> <a href="https://www.woodtv.com/news/kent-county/testimony-poll-worker-admitted-to-using-usb-drive/" rel="nofollow noopener noreferrer" target="_blank">https://www.woodtv.com/news/kent-county/testimony-poll-worker-admitted-to-using-usb-drive/</a>

Recent searches

Search options

Administered by:

Server stats:

#dataexfiltration