Security Affairs

APRIL 25, 2024

Early in 2024, a customer contacted Cisco to report a suspicious related to its Cisco Adaptive Security Appliances (ASA). On compromised ASA devices, attackers utilize the host-scan-reply field to deliver shellcode, bypassing the need for CVE-2018-0101 exploitation. PSIRT and Talos launched an investigation to support the customer.

IT 123

IT Authentication Access Security 123

Schneier on Security

OCTOBER 3, 2019

In August, CyberITL completed a large-scale survey of software security practices in the IoT environment, by looking at the compiled software. Data Collected: 22 Vendors 1,294 Products 4,956 Firmware versions 3,333,411 Binaries analyzed Date range of data: 2003-03-24 to 2019-01-24 (varies by vendor, most up to 2018 releases). [.].

IoT 85

IoT Security Data collection Government 85

Security Affairs

NOVEMBER 9, 2020

Security experts from Palo Alto Networks have spotted two never-before-detected Powershell backdoors while investigating an attack on Microsoft Exchange servers at an organization in Kuwait. Experts attribute the attack to a known threat actor tracked as xHunt , aka Hive0081, which was first discovered in 2018. <C2 domain>.

Communications 123

Communications Access Government Encryption 123

Security Affairs

MAY 22, 2020

The group behind this activity is the same we identified in the past malicious operations described in Roma225 (12/2018), Hagga (08/2019), Mana (09/2019), YAKKA (01/2020). All threats use at least one obfuscation method to make the analysis harder. Technical Analysis. ’i am not a coder! Load($_PMP);$_1.EntryPoint.invoke($S,$X)”,

Manufacturing 139

Manufacturing e-Delivery IT Security 139

Security Affairs

MAY 2, 2019

But let’s move on and start a quick analysis on it. The group conducts operations primarily in the Middle East, targeting financial, government, energy, chemical, telecommunications and other industries. This last feature is the most appreciated characteristics attributed to APT34. Source: MISP Project ). The Glimpse Project.

Computer and Electronics 109

Computer and Electronics Communications Government File names 109

Security Affairs

JUNE 10, 2019

Security experts at Trend Micro report that the MuddyWater APT group (aka SeedWorm and TEMP.Zagros ), has used an updated multi-stage PowerShell backdoor in recent cyber espionage campaigns. “One of the campaigns sent spear-phishing emails to a university in Jordan and the Turkish government. ” continues the analysis.

IT 78

IT Phishing Government Security 78