Nomios UK&I

I am so happy, and proud to share the exciting news ! Nomios strengthens its Cybersecurity service offering by acquiring Dionach. Together we will provide our customers even more expertise, more agility and more flexibility.   Welcome on board Dionach’s Team for that great cyber security journey #etrela #Cybersecurity #redteam #GRC Nomios Group; Nomios Belgium; Nomios UK&I; Nomios Germany

🚨 Nomios Weekly CyberWednesday update (30.10 - 06.11)🚨 ! Every Wednesday, we bring you the top 10 most important updates in cybersecurity and networking. Stay informed with the latest news, threats, and developments to keep you ahead in the ever-evolving digital landscape. 👇 Top 10 cybersecurity updates: 𝟭. 𝗔𝗻𝗱𝗿𝗼𝗶𝗱 𝗭𝗲𝗿𝗼-𝗗𝗮𝘆 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱, 𝗨𝗿𝗴𝗲𝗻𝘁 𝗣𝗮𝘁𝗰𝗵 𝗡𝗲𝗲𝗱𝗲𝗱 - Two zero-day flaws in Qualcomm chipsets are being actively exploited. Users should update immediately. (Source: Cybersecuritynews) 𝟮. 𝗡𝗖𝗦𝗖, 𝗦𝗼𝗽𝗵𝗼𝘀, 𝗮𝗻𝗱 𝗙𝗕𝗜 𝗥𝗲𝘃𝗲𝗮𝗹 𝗦𝗼𝗽𝗵𝗶𝘀𝘁𝗶𝗰𝗮𝘁𝗲𝗱 𝗖𝗵𝗶𝗻𝗲𝘀𝗲 𝗔𝘁𝘁𝗮𝗰𝗸𝘀 - Chinese state-backed hackers have exploited zero-day vulnerabilities in Sophos XG and FortiGate firewalls. Sophos reports a years-long struggle, and the FBI seeks assistance. (Source: SecurityWeek) 𝟯. 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗪𝗮𝗿𝗻𝘀 𝗼𝗳 𝗖𝗵𝗶𝗻𝗲𝘀𝗲 𝗕𝗼𝘁𝗻𝗲𝘁 𝗧𝗮𝗿𝗴𝗲𝘁𝗶𝗻𝗴 𝗥𝗼𝘂𝘁𝗲𝗿𝘀 - Microsoft reports that a Chinese botnet is using password spray attacks to steal credentials, exploiting flaws in routers and VPNs. (Source: The Hacker News) 𝟰. 𝗠𝗮𝘀𝘀𝗶𝘃𝗲 𝗚𝗶𝘁 𝗖𝗼𝗻𝗳𝗶𝗴 𝗕𝗿𝗲𝗮𝗰𝗵 𝗘𝘅𝗽𝗼𝘀𝗲𝘀 𝟭𝟱,𝟬𝟬𝟬 𝗖𝗿𝗲𝗱𝗲𝗻𝘁𝗶𝗮𝗹𝘀 - The EMERALDWHALE campaign has targeted exposed Git configurations, stealing credentials and cloning thousands of private repositories. (Source: The Hacker News) 𝟱. 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀𝗲𝘀 𝗧𝗮𝗿𝗴𝗲𝘁𝗲𝗱 𝗶𝗻 𝗟𝗮𝗿𝗴𝗲-𝗦𝗰𝗮𝗹𝗲 𝗖𝗵𝗮𝘁𝗚𝗣𝗧 𝗣𝗵𝗶𝘀𝗵𝗶𝗻𝗴 - Barracuda Networks has detected a global phishing campaign impersonating OpenAI, aiming to steal ChatGPT credentials. (Source: SecurityWeek) 𝟲. 𝗡𝗼𝗿𝘁𝗵 𝗞𝗼𝗿𝗲𝗮𝗻 𝗚𝗿𝗼𝘂𝗽 𝗖𝗼𝗹𝗹𝗮𝗯𝗼𝗿𝗮𝘁𝗲𝘀 𝘄𝗶𝘁𝗵 𝗣𝗹𝗮𝘆 𝗥𝗮𝗻𝘀𝗼𝗺𝘄𝗮𝗿𝗲 - The North Korean APT group Jumpy Pisces partners with Play ransomware, marking an alarming new collaboration. (Source: The Hacker News) 𝟳. 𝗛𝗮𝗰𝗸𝗶𝗻𝗴 𝘄𝗶𝘁𝗵 𝗔𝗜 𝗨𝘀𝗶𝗻𝗴 𝗪𝗵𝗶𝘁𝗲𝗥𝗮𝗯𝗯𝗶𝘁𝗡𝗲𝗼 - The WhiteRabbitNeo AI tool is revolutionising offensive cybersecurity by simulating attacks with AI speed. Experts warn of its dual-use potential for malicious purposes. (Source: SecurityWeek) 𝟴. 𝗢𝗪𝗔𝗦𝗣 𝗕𝗲𝗲𝗳𝘀 𝗨𝗽 𝗚𝗲𝗻𝗔𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗚𝘂𝗶𝗱𝗮𝗻𝗰𝗲 𝗔𝗺𝗶𝗱 𝗗𝗲𝗲𝗽𝗳𝗮𝗸𝗲 𝗦𝘂𝗿𝗴𝗲 - OWASP has released new guidance to defend against AI-based threats, like deepfake scams, as incidents rise. (Source: DarkReading) 𝟵. 𝗡𝗲𝘄 𝗟𝗶𝗴𝗵𝘁𝗦𝗽𝘆 𝗦𝗽𝘆𝘄𝗮𝗿𝗲 𝗩𝗲𝗿𝘀𝗶𝗼𝗻 𝗧𝗮𝗿𝗴𝗲𝘁𝘀 𝗶𝗣𝗵𝗼𝗻𝗲𝘀 - An upgraded LightSpy version can exfiltrate data and even prevent devices from booting, using known iOS vulnerabilities. (Source: The Hacker News) 𝟭𝟬. 𝗡𝗼𝗸𝗶𝗮 𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝗻𝗴 𝗔𝗹𝗹𝗲𝗴𝗲𝗱 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵 𝗯𝘆 𝗜𝗻𝘁𝗲𝗹𝗕𝗿𝗼𝗸𝗲𝗿 - Nokia is looking into claims of a data breach involving stolen source code, which could impact telecom infrastructure. (Source: Cybersecuritynews) For more in-depth details, check the comments for a link to our dedicated pages! 🚀

🚨 Nomios Weekly CyberWednesday update (23.10 - 30.10)🚨 ! Every Wednesday, we bring you the top 10 most important updates in cybersecurity and networking. Stay informed with the latest news, threats, and developments to keep you ahead in the ever-evolving digital landscape. 👇 Top 10 cybersecurity updates: 𝟭. 𝗘𝘂𝗿𝗼𝗽𝗲𝗮𝗻 𝗰𝗼𝗺𝗽𝗮𝗻𝗶𝗲𝘀 𝗮𝗻𝘅𝗶𝗼𝘂𝘀 𝗼𝘃𝗲𝗿 𝗻𝗼𝗻-𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗮𝘁𝗶𝗼𝗻 𝗼𝗳 𝗘𝗨 𝗰𝘆𝗯𝗲𝗿 𝗿𝘂𝗹𝗲𝘀 - Critical sectors like water providers are concerned about the clarity and readiness for cybersecurity rules across most EU member states. (Source: Euronews) 𝟮. 𝗙𝗼𝗿𝘁𝗶𝗻𝗲𝘁 𝘄𝗮𝗿𝗻𝘀 𝗼𝗳 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗶𝗻 𝗙𝗼𝗿𝘁𝗶𝗠𝗮𝗻𝗮𝗴𝗲𝗿 𝘂𝗻𝗱𝗲𝗿 𝗮𝗰𝘁𝗶𝘃𝗲 𝗲𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 - Known as FortiJump, this vulnerability allows unauthorized code execution by attackers. (Source: The Hacker News) 𝟯. 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 '𝗗𝗼𝘄𝗻𝗱𝗮𝘁𝗲' 𝗮𝘁𝘁𝗮𝗰𝗸 𝗿𝗲𝘃𝗲𝗿𝘁𝘀 𝗽𝗮𝘁𝗰𝗵𝗲𝗱 𝗣𝗖𝘀 𝘁𝗼 𝗮 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝘀𝘁𝗮𝘁𝗲 - Attackers manipulate the Windows Update process to downgrade fully patched systems. (Source: Dark Reading) 𝟰. 𝗗𝗲𝗹𝘁𝗮 𝘀𝘂𝗲𝘀 𝗖𝗿𝗼𝘄𝗱𝗦𝘁𝗿𝗶𝗸𝗲 𝗼𝘃𝗲𝗿 𝘁𝗲𝗰𝗵 𝗼𝘂𝘁𝗮𝗴𝗲 𝘁𝗵𝗮𝘁 𝗰𝗮𝗻𝗰𝗲𝗹𝗲𝗱 𝗳𝗹𝗶𝗴𝗵𝘁𝘀 - Delta claims CrowdStrike cut corners leading to a global technology outage. (Source: SecurityWeek) 𝟱. 𝗖𝗶𝘀𝗰𝗼 𝗽𝗮𝘁𝗰𝗵𝗲𝘀 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗲𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱 𝗶𝗻 𝗹𝗮𝗿𝗴𝗲-𝘀𝗰𝗮𝗹𝗲 𝗯𝗿𝘂𝘁𝗲-𝗳𝗼𝗿𝗰𝗲 𝗰𝗮𝗺𝗽𝗮𝗶𝗴𝗻 - Affects Cisco's Adaptive Security Appliance and Firepower Threat Defense products. (Source: SecurityWeek) 𝟲. 𝗡𝗲𝘄 𝗚𝗿𝗮𝗻𝗱𝗼𝗿𝗲𝗶𝗿𝗼 𝗯𝗮𝗻𝗸𝗶𝗻𝗴 𝗺𝗮𝗹𝘄𝗮𝗿𝗲 𝘃𝗮𝗿𝗶𝗮𝗻𝘁𝘀 𝗲𝗺𝗲𝗿𝗴𝗲 𝘄𝗶𝘁𝗵 𝗮𝗱𝘃𝗮𝗻𝗰𝗲𝗱 𝘁𝗮𝗰𝘁𝗶𝗰𝘀 𝘁𝗼 𝗲𝘃𝗮𝗱𝗲 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 - Targeting banking customers globally with sophisticated techniques to bypass security measures. (Source: The Hacker News) 𝟳. 𝗖𝗵𝗮𝘁𝗚𝗣𝗧 𝗝𝗮𝗶𝗹𝗯𝗿𝗲𝗮𝗸 - Researchers discover new ways to bypass AI safeguards using hexadecimal encoding and emojis, tricking ChatGPT into generating malicious outputs. (Source: SecurityWeek) 𝟴. 𝗘𝗶𝗴𝗵𝘁 𝘂𝗻𝗱𝗲𝗿𝗿𝗮𝘁𝗲𝗱 𝗽𝗵𝗶𝘀𝗵𝗶𝗻𝗴 𝘁𝗲𝗰𝗵𝗻𝗶𝗾𝘂𝗲𝘀 - Techniques range from SEO poisoning to mobile app phishing, increasingly used by attackers. (Source: SecurityWeek) 𝟵. 𝗡𝗼𝘁𝗼𝗿𝗶𝗼𝘂𝘀 𝗵𝗮𝗰𝗸𝗲𝗿 𝗴𝗿𝗼𝘂𝗽 𝗧𝗲𝗮𝗺𝗧𝗡𝗧 𝗹𝗮𝘂𝗻𝗰𝗵𝗲𝘀 𝗻𝗲𝘄 𝗰𝗹𝗼𝘂𝗱 𝗮𝘁𝘁𝗮𝗰𝗸𝘀 𝗳𝗼𝗿 𝗰𝗿𝘆𝗽𝘁𝗼 𝗺𝗶𝗻𝗶𝗻𝗴 - TeamTNT targets cloud-native environments to mine cryptocurrencies and rent out breached servers. (Source: The Hacker News) 𝟭𝟬. 𝗔𝗿𝗺𝗶𝘀 𝗿𝗮𝗶𝘀𝗲𝘀 $𝟮𝟬𝟬𝗠 𝗮𝘁 $𝟰.𝟮𝗕 𝘃𝗮𝗹𝘂𝗮𝘁𝗶𝗼𝗻 𝗮𝘀 𝗴𝗿𝗼𝘄𝘁𝗵 𝘀𝗼𝗮𝗿𝘀, 𝗲𝘆𝗲𝘀 𝗜𝗣𝗢 - Armis continues its rapid expansion, preparing for a potential IPO. (Source: Armis) For more in-depth details, check the comments for a link to our dedicated page! 🚀

The new real Living Wage rates are out! 🙌 Both the UK and London Living Wage rates have risen to: - £12.60 across the UK - £13.85 in London The increase means a pay-rise for almost half a million workers, and thousands of pounds more for full-time workers earning the real Living Wage, than the Government’s minimum wage. With rising living costs, this has never been more important. The Living Wage Foundation's real Living Wage remains the only independently calculated UK wage rate solely based on the actual cost of living. Over 15,000 accredited Living Wage Employers have voluntarily signed up to pay these new rates, so their employees can continue to meet their everyday needs. Together they’ve secured nearly 3.5bn in extra wages for low paid worker since 2011. Find out more about this year's rates: https://ow.ly/H04a50TNx7p Want to join our growing movement of businesses ensuring work that works for everyone?: https://ow.ly/zCEr50TNwYN #LivingWage #UKwages #LivingWageEmployers #LivingWageAccreditation