Elevate your knowledge and skills with N2K's practice tests, designed to skill-check and help you conquer certifications like a pro. Whether you’re new IT or cyber, or ready to hone in on your technical or managerial skills, there's a certification to help. Check out N2K's catalog of practice tests and use promo code “NETWORK” to save 15% through 4/30/2024.
Understanding the Midnight Eclipse Activity and CVE 2024-3400: Host David Moulton and Andy Piazza, Sr. Director of Threat Intelligence at Unit 42, dive into the critical vulnerability CVE-2024-3400 found in PAN-OS software of Palo Alto Networks, emphasizing the importance of immediate patching and mitigation strategies for such vulnerabilities, especially when they affect edge devices like firewalls or VPNs.
Okta has warned of a surge in credential-stuffing attacks against online services over the past month, Help Net Security reports. The company stated, "All recent attacks we have observed share one feature in common: they rely on requests being routed through anonymizing services such as TOR. Millions of the requests were also routed through a variety of residential proxies."
In addition to implementing security best practices such as multifactor authentication and strong passwords, Okta recommends that customers activate Okta Identity Engine, enable ThreatInsight in Log-and-Enforce mode, and block access requests from residential proxies.
Launching a new product or service? Looking for alternative ways to recruit cyber talent? Want your company or leadership team members to be seen as an industry thought leader? Be heard by over 350,000 subscribers on the N2K CyberWire network. Whether through sponsored advertising, executive events, or exclusive interviews, we offer off-the-shelf and bespoke packages to help you reach your goals. Let’s work together.
Researchers at Securonix are tracking a suspected North Korean phishing campaign that's targeting software developers with a new Python-based remote access Trojan. The threat actors send phony job interview requests to their targets, then trick them into downloading a malicious zip archive from GitHub as part of the interview process. Securonix notes, "This method is effective because it exploits the developer’s professional engagement and trust in the job application process, where refusal to perform the interviewer’s actions could compromise the job opportunity. The attackers tailor their approach to appear as credible as possible, often by mimicking real companies and replicating actual interview processes."
Cybercrime knows no bounds, and a united front is our strongest defense. At RSA Conference™ 2024, May 6 – 9, we unite in San Francisco as a cybersecurity community, fostering learning, networking, idea exchange, and exploration of cutting-edge innovations. Join us as we face the future of cybersecurity head on. Learn more and register.
The United Kingdom's Product Security and Telecommunications Infrastructure Act 2022 (PSTI) goes into effect today, banning IoT devices from using easily guessable default usernames and passwords, the Record reports. The law states that "[p]asswords must be unique per product; or capable of being defined by the user of the product. They must not be based on incremental counters; based on or derived from publicly available information; based on or derived from unique product identifiers, such as a serial number unless this is done using an encryption method, or keyed hashing algorithm, that is accepted as part of good industry practice; or otherwise easily guessable."
Additionally, "[t]he manufacturer must provide information on how to report to them security issues about their product," and "[i]nformation on minimum security update periods must be published and made available to the consumer in a clear accessible and transparent manner."
The law will be enforced by the UK's Office for Product Safety and Standards (OPSS).
Today's issue includes events affecting China, the Democratic People's Republic of Korea, the United Kingdom, and the United States.
ToddyCat’s traffic tunneling and data extraction tools (Securelist) We continue to report on the APT group ToddyCat. This time, we’ll talk about traffic tunneling, constant access to a target infrastructure and data extraction from hosts.
LightSpy Malware Variant Targeting macOS (Huntress) There's a new variant of LightSpy malware targeting macOS. Here, Huntress' macOS researchers dive into the macOS variant of the LightSpy malware, after gaps in recent reports stating that the LightSpy malware strictly targets iOS.
Analysis of DEV#POPPER: New Attack Campaign Targeting Software Developers Likely Associated With North Korean Threat Actors (Securonix) The Securonix Threat Research Team has been monitoring an ongoing social engineering attack campaign from North Korean threat actors who are targeting developers using fake interviews to deliver a Python-based RAT. Read more.
Okta warns of "unprecedented" credential stuffing attacks on customers (BleepingComputer) Okta warns of an "unprecedented" spike in credential stuffing attacks targeting its identity and access management solutions, with some customer accounts breached in the attacks.
Hackers accessed more than 19,000 accounts on California state welfare platform (The Record) Officials at the California Statewide Automated Welfare System filed breach notification documents with state regulators earlier this month, warning participants in the BenefitsCal program about an intruder.
Crawford puts forward bill on cybersecurity risks to water systems (Arkansas Democrat Gazette) WASHINGTON -- U.S. Rep. Rick Crawford, R-Ark., has introduced legislation to establish a governing body for developing risk and resilience requirements for water systems to protect networks from cybersecurity threats.
DHS announces AI safety board with OpenAI founder, CEOs of Microsoft, Nvidia, IBM (The Record) The Artificial Intelligence Safety and Security Board will include representatives of tech companies, critical infrastructure entities, academia, government agencies and “leaders in the civil rights, civil liberties, and privacy communities,” said Homeland Security Secretary Alejandro Mayorkas.
For a complete running list of events, please visit the Event Tracker.
Space Cyber Executive Course and Conference (Glasgow, Scotland, UK, May 13 - 17, 2024) The first Executive Space Course to be offered in Scotland by the International Space University (ISU) will be hosted and developed in partnership with the University of Strathclyde Business School (SBS). The programme will have cybersecurity as its central theme and includes postgraduate level micro credentials. The Course will be followed by a two-day conference with the theme “Space: Securing our Entrepreneurial Future".
Spring 2024 CISSP Study Group presented by ISSA Central MD (Columbia, or virtual, Maryland, USA, Feb 20 - May 1, 2024) Our Study Group fosters a learning environment to better absorb and understand the material. This is much better than the alternative of cram it in and regurgitate it on a test immediately following. Our approach simply makes the information more useful and easier to interpret! You can attend each session in-person in Columbia, MD, or attend virtually on line.
SANS Baltimore Spring 2024 (Baltimore (and virtual), Maryland, USA, Apr 28 - May 3, 2024) At SANS Baltimore Spring 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
RSAC Party for Marketers (Ticket Needed) (San Francisco, CA, USA, May 5, 2024) Join us from 5:30 - 7:30pm at the enchanting Novela San Fran, a literature-themed bar, located in the heart of San Francisco. This unique venue sets the perfect backdrop for a night of networking, celebration, and inspiration before the big week ahead! It's an ideal spot to unwind and connect with fellow marketing professionals before diving into the exciting week ahead at RSAC 2024.
World’s Top 50 Innovators 2024 (London, England, UK, May 8 - 10, 2024) We are thrilled to invite you to join us at one of the most prestigious events in the tech calendar, the World’s Top 50 Innovators 2024! Get ready to embark on an incredible journey of inspiration, creativity, and breakthrough technologies that will shape the future. Innovation is the driving force behind progress, and once again it’s time to celebrate the companies that are pushing the boundaries of what’s possible. Come and join us to learn what’s on the horizon, understand the bigger picture, and celebrate world-firsts and sensational achievements in the high-tech sectors. The format will be a series of Codex Talks, each of which is a concise presentation, lasting 15 minutes (or less), in which the speaker addresses a challenging question faced by their technology or industry today, and ends with a bold prediction for the future.
SANS Security West San Diego 2024 (San Diego (and virtual), California, USA, May 9 - 14, 2024) At SANS Security West San Diego 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
