Saturday, November 23, 2024
Latest:

Computer Security Articles

RSS Reader for Computer Security Articles

TrendMicro

Security TrendMicro 

Attacks on 5G Infrastructure From Users’ Devices

admin , , , , , , , , , ,

Credit to Author: Salim S.I.| Date: Wed, 20 Sep 2023 00:00:00 +0000

Crafted packets from cellular devices such as mobile phones can exploit faulty state machines in the 5G core to attack cellular infrastructure. Smart devices that critical industries such as defense, utilities, and the medical sectors use for their daily operations depend on the speed, efficiency, and productivity brought by 5G. This entry describes CVE-2021-45462 as a potential use case to deploy a denial-of-service (DoS) attack to private 5G networks.

Read more
Security TrendMicro 

Protect CNC Machines in Networked IT/OT Environments

admin , , , ,

Credit to Author: William Malik| Date: Tue, 19 Sep 2023 00:00:00 +0000

Networking IT/OT environments is a bit like walking a tightrope, balancing the pursuit of intelligence and efficiency against the risks of exposing OT systems to the wider world. Trend Micro recently teamed up with global machine tool company Celada to identify specific risks associated with industrial CNC machines—and how to mitigate them.

Read more
Security TrendMicro 

Earth Lusca Employs New Linux Backdoor, Uses Cobalt Strike for Lateral Movement

admin , , ,

Credit to Author: Joseph C Chen| Date: Mon, 18 Sep 2023 00:00:00 +0000

While monitoring Earth Lusca, we discovered an intriguing, encrypted file on the threat actor’s server — a Linux-based malware, which appears to originate from the open-source Windows backdoor Trochilus, which we’ve dubbed SprySOCKS due to its swift behavior and SOCKS implementation.

Read more
Security TrendMicro 

Biden National Cybersecurity Strategy Key Takeaways

admin , , , ,

Credit to Author: Jon Clay| Date: Fri, 15 Sep 2023 00:00:00 +0000

Major changes are underway, with new rules for federal agencies and updated requirements for public-private partnerships. We discuss the implementation plans for the strategy’s first two pillars: defend critical infrastructure and disrupt and dismantle threat actors.

Read more
Security TrendMicro 

RedLine/Vidar Abuses EV Certificates, Shifts to Ransomware

admin , , , ,

Credit to Author: Hitomi Kimura| Date: Wed, 13 Sep 2023 00:00:00 +0000

In this blog, we investigate how threat actors used information-stealing malware with EV code signing certificates and later delivered ransomware payloads to its victims via the same delivery method.

Read more
Security TrendMicro 

TrickBot & Conti Sanctions: Implications for CISOs & Boardrooms

admin , , , , , , ,

Credit to Author: Ed Cabrera| Date: Fri, 08 Sep 2023 00:00:00 +0000

Discover what the increased regulatory risk due to recent US and UK sanctions imposed on TrickBot and Conti cybercriminals mean for CISOs and board members.

Read more
Security TrendMicro 

Analyzing a Facebook Profile Stealer Written in Node.js

admin , , , ,

Credit to Author: Jaromir Horejsi| Date: Tue, 05 Sep 2023 00:00:00 +0000

We analyze an information stealer written in Node.js, packaged into an executable, exfiltrated stolen data via both Telegram bot API and a C&C server, and employed GraphQL as a channel for C&C communication.

Read more