#StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability https://www.databreaches.net/stopransomware-lockbit-3-0-ransomware-affiliates-exploit-cve-2023-4966-citrix-bleed-vulnerability/?utm_source=dlvr.it&utm_medium=mastodon

Cybersecurity Advisory

#StopRansomware: AvosLocker Ransomware (Update)
Release Date: October 11, 2023
⸻
→⁠https://ghostarchive.org/archive/3oI35
→⁠https://web.archive.org/web/20231016223628/https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-284a
⸻

These are two security recommendations listed in this advisory that I really wish had more adoption...

Refrain from requiring password changes more frequently than once per year.

Note: NIST guidance suggests favoring longer passwords instead of requiring regular and frequent password resets. Frequent password resets are more likely to result in users developing password “patterns” cyber criminals can easily decipher.

Require phishing-resistant multifactor authentication for all services to the extent possible, particularly for webmail, virtual private networks, and accounts that access critical systems.

Latest issue of my curated #cybersecurity and #infosec list of resources for week #20/2023 is out! It includes, but not only:

‣ PoC Tool Exploits Unpatched #KeePass Vulnerability to Retrieve Master Passwords
‣ Millions of Smartphones Distributed Worldwide With Preinstalled ‘Guerrilla’ #Malware
‣ #MalasLocker ransomware targets #Zimbra servers, demands charity donation
‣ 4 Countries Join #NATO Cyber Defense Center
‣ New #ZIP domains spark debate among #cybersecurity experts
‣ Open-source #CobaltStrike port 'Geacon' used in #macOS attacks
‣ #IBM Snaps up DSPM Startup Polar Security
‣ Russian Hacker “Wazawaka” Indicted for #Ransomware
‣ #StopRansomware: BianLian Ransomware Group
‣ Malware turns home routers into proxies for Chinese state-sponsored hackers
‣ ‘FriendlyName’ Buffer Overflow Vulnerability in #Wemo Smart Plug V2
‣ Stealthy MerDoor malware uncovered after five years of attacks
‣ Airline exposes passenger info to others due to a 'technical error'
‣ New 'MichaelKors' Ransomware-as-a-Service Targeting #Linux and #VMware ESXi Systems
‣ Ransomware group claims 2.5 terabytes of stolen data less than a month after emerging online
‣ North Korea funding half its missile program with #cryptocurrency theft and cyberattacks
‣ Former #Ubiquiti Employee Gets 6 Years in Jail for $2 Million Crypto Extortion Case
‣ #Capita warns customers they should assume data was stolen

#cyberdefense #security #automation #airline #data

This week's recommended reading is: "PowerShell Automation and Scripting for CyberSecurity: Hacking and Defense for Red and Blue Teamers" by Miriam C. Wiesner

Subscribe to the #newsletter to have it piping hot in your inbox every Sunday

https://0x58.substack.com/p/infosec-mashup-week-202023

#StopRansomware: BianLian Ransomware Group https://www.databreaches.net/stopransomware-bianlian-ransomware-group/?utm_source=dlvr.it&utm_medium=mastodon

#StopRansomware: Malicious Actors Exploit CVE-2023-27350 in PaperCut MF and NG https://www.databreaches.net/stopransomware-malicious-actors-exploit-cve-2023-27350-in-papercut-mf-and-ng/?utm_source=dlvr.it&utm_medium=mastodon