BIP CyberSec’s Post

Previously compromised credentials are growing as an initial access vector — this is one of the highlighted findings from the 2024 Palo Alto Networks Unit 42 Incident Response Report. Glean further insights from their collected data now:#ciso #secops #incidentresponse #dfir #cio #securityoperationscenter

Ho appena finito il corso “Test di sicurezza: gestione delle vulnerabilità con Nessus” di Mike Chapple! Dai uno sguardo: https://lnkd.in/d6EZT_aP #gestionedellavulnerabilità.

Il 13 febbraio si parla di Attack Analyzer. Ci sarà una demo che ci farà capire come semplificare il lavoro manuale e ripetitvio per l'analisi delle minacce di phishing e di malware, gestire grandi volumi di allarmi e soprattutto risparmiare tempo. #SplunkSecurity

A recent report by Unit 42 reveals the emergence of Repellent Scorpius, a ransomware-as-a-service (RaaS) group distributing the Cicada3301 ransomware. First appearing in May 2024, this group operates with a multi-extortion model, targeting various sectors and demanding ransoms while also threatening to leak sensitive data. Read the full article here: https://lnkd.in/gf_46j-Y

#ZeroTrust: la soluzione vincente contro i ransomware. Iscriviti al nostro webinar per scoprire come proteggere efficacemente la tua organizzazione. #AkamaiSecurity

Identity management can be a huge challenge. The bigger you are and the more complex your environment, the more you need Veza to help you sort it all out.

How secure do you think RCS is? This week at MEF RCS World in São Paulo, Enea Senior PreSales Engineer Ignacio Nuñez Aceves shared his insights on RCS and the messaging ecosystem, with particular focus on security. In his session, Ignacio discussed some key issues, including the attacks observed on RCS, how rich media is used in scams and fraud, and the challenges facing protection strategies. #RCS #RichContentMessaging #MobileSecurity #MessagingSecurity Mobile Ecosystem Forum

#ZeroTrust: la soluzione vincente contro i ransomware. Iscriviti al nostro webinar per scoprire come proteggere efficacemente la tua organizzazione. #AkamaiSecurity

Old dog, new tricks "The ThreatDown Managed Detection and Response (MDR) team recently identified the RansomHub ransomware gang using a previously unseen method of attack using two tools: TDSSKiller, employed to disable endpoint detection and response (EDR) systems, and LaZagne, used to harvest credentials. Although both TDSSKiller and LaZagne have been used by attackers for years, this is the first record of RansomHub using them in its operations, with the TTPs not listed in CISA’s recently published advisory on RansomHub. The tools were deployed following initial reconnaissance and network probing through admin group enumeration, such as net1 group "Enterprise Admins" /do."

#ZeroTrust: la soluzione vincente contro i ransomware. Iscriviti al nostro webinar per scoprire come proteggere efficacemente la tua organizzazione. #AkamaiSecurity