article thumbnail

Pro-Ukraine attackers compromise Docker images to launch DDoS attacks on Russian sites

Security Affairs

Pro-Ukraine hackers, likely linked to Ukraine IT Army , are using Docker images to launch distributed denial-of-service (DDoS) attacks against a dozen websites belonging to government, military, and media. CrowdStrike Intelligence assesses these actors almost certainly compromised the honeypots to support pro-Ukrainian DDoS attacks.

Honeypots 104
article thumbnail

Weekly podcast: ICS attacks, Reddit and SIM swap arrests

IT Governance

Hello and welcome to the IT Governance podcast for Friday, 10 August. Cybereason’s researchers recently set up a honeypot environment with a network architecture that replicated that of “typical power substation” and waited. Until next time you can keep up with the latest information security news on our blog.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Catches of the Month: Phishing Scams for May 2023

IT Governance

Another ChatGPT threat vector emerges Since the emergence of ChatGPT last year, IT Governance has covered the cyber security implications it’s having in comprehensive detail. Research from the cyber security firm Check Point discovered 13,295 newly registered domains imitating OpenAI and ChatGPT. Can you spot a scam?

article thumbnail

Best beginner cyber security certifications

IT Governance

The course is delivered by an experienced information security consultant who has an extensive understanding of the implementation of security solutions in organisations of all sizes. Penetration tester Ethical hacker Security consultant. What skills will you learn? Potential job roles. Download now.

article thumbnail

Network Security Architecture: Best Practices & Tools

eSecurity Planet

or specialized tools to deliver obfuscation defenses such as: Honeypots: Provide tempting targets for attackers that contain no valid information as one of several similar deception technologies to trigger alerts for early attack detection. These techniques can use built-in software features (for firewalls, operating systems, etc.)

Security 117
article thumbnail

Australian Govt agency ACSC warns of Emotet and BlueKeep attacks

Security Affairs

The Australian agency also warns of Emotet campaigns that in the last months hit the country posing a significant threat for both organizations and government offices. The popular expert Kevin Beaumont observed some of its EternalPot RDP honeypots crashing after being attacked. They only expose port 3389.

article thumbnail

Bad Packets warns of over 14,500 Pulse secure VPN endpoints vulnerable to CVE-2019-11510

Security Affairs

The scanning activity detected by the honeypots of BadPackets was originated from a host in Spain, threat actors aim at gaining access into the private VPN network. ?????????????? “Unauthenticated remote attacker with network access via HTTPS can send a specially crafted URI to perform an arbitrary file reading vulnerability.”