Hackers succeed more to stay undetected in a corporate network
The number of Kerberoasting identity attacks has increased almost sixfold in the past year. Legitimate RMM tools, in turn, are being used three times more by hackers. Above all, these trends seem to show that hackers are looking for ways to fool around unseen in a corporate network for a longer per... Read more
Microsoft won’t let hackers mess with detection tool Sysmon any longer
Microsoft is releasing Sysmon 15. Sysmon is an acronym for System Monitor and is a free Microsoft tool that helps to block cyber threats. The new version should bolster the tool against hacking attempts.
System Monitor (Sysmon) is having its fifteenth edition. This time Microsoft chooses to str... Read more
Microsoft strengthens default protection in Defender for Endpoint
The new security offering automatically turns on tamper protection and other features.
This week Microsoft announced new built-in protection features for all devices onboarded to Defender for Endpoint, its security platform for endpoint devices. Once applied, the new default set of settings prov... Read more
Defender for Office 365 will allow users to report phishing messages
Microsoft announces an update for Microsoft Defender for Office 365 that allows Microsoft Teams users to alert their management and IT team of phishing, scamming and other dodgy messages.
Previously known as Office 365 ATP (Advanced Threat Protection), Microsoft Defender for Office 365 strives t... Read more
GIFShell attacks Microsoft Teams users with GIFs
GIFShell is attacking Microsoft Teams users by making them download malicious files on their system via GIFs.
A new malware attack has been surfacing over the past few weeks. GIFShell was created to intercept Microsoft Teams and execute phishing attacks using GIFs. Although many people enjoy a g... Read more
PyPI packages under attack after phishers target developers
Developers and maintainers of PyPI are under attack by digital scammers through email phishing.
Several PyPI developers and maintainers have fallen for phishing scams conducted by digital scammers. The malicious campaign was disclosed by Adam Johnson, a project board member at Django, who receiv... Read more
Google blocks over thirty malicious domains used by hackers
Google blocked over thirty malicious domains connected to cybercriminal groups in Russia, UAE and India.
The domains actively targeted AWS, Gmail and many other personal accounts to perform corporate espionage against organizations and human activists.
According to the threat analysis group a... Read more
Google will allow users to hide personal data from searches
Google’s new policy makes removing your personal information and other risky info from search results easier.
Google announced that users could have all their “personal” information removed easily from SERPs.
How does this offer differentiate from the past ones?
The company had offer... Read more
Qualys launches Multi-Vector EDR 2.0
Qualys developed Multi-Vector EDR 2.0 to surface serious and critical incidents.
Security specialist Qualys recently announced Multi-Vector EDR 2.0. The EDR system delivers complete threat detection through vulnerability assessments and fixing.
The platform includes risk-hunting and various m... Read more
Deloitte chooses Exabeam for XDR/SIEM capabilities in MXDR
Deloitte has chosen Exabeam for their XDR and SIEM capabilities of their new MXDR offering, which we reported on on more detail yesterday. Exabeam details why Deloitte chose them in a separate release.
Deloitte launched the MXDR suite earlier this week. It consists of the offerings of Zscaler, S... Read more