Check Your Pulse: Suspected APT Actors Leverage Authentication Bypass Techniques and Pulse Secure Zero-Day
Executive Summary
Mandiant recently responded to multiple security incidents involving compromises of Pulse Secure VPN appliances.
This blog post examines multiple, related techniques for bypassing single and multifactor authentication on Pulse...
Attackers Test Weak Passwords in Purple Fox Malware Attacks
Researchers share a list of passwords that Purple Fox attackers commonly brute force when targeting the SMB protocol.Weak passwords used over the Windows Server Message Block (SMB) protocol are...
U.S. banks deploy AI to monitor customers, workers amid tech backlash
Several U.S. banks have started deploying camera software that can analyze customer preferences, monitor workers, and spot people sleeping near ATMs, even as they remain wary about possible backlash...
Scammers are capitalizing on our desire to get away
Watch out – malicious domains targeting travelling are on the rise.After more than a year of rolling lockdowns, and with light beginning to peek out at the end of...
7 most common ways to fail at DevSecOps
Organizations adopt DevSecOps for a variety of reasons: to enable digital transformation projects, deliver value faster, gain a competitive advantage, lower the cost of security remediations, and more. Despite...
Security Gaps in IoT Access Control Threaten Devices and Users
Researchers spot problems in how IoT vendors delegate device access across multiple clouds and users.A team of Internet of Things security researchers has discovered vulnerabilities in the way IoT...
High-Level Admin of FIN7 Cybercrime Group Sentenced to 10 Years in Prison
Fedir Hladyr pleaded guilty in 2019 to conspiracy to commit wire fraud and conspiracy to commit computer hacking.A high-level manager of cybercrime group FIN7, also known as the Carbanak...
