Anderson Rocha

New Research on Cyber Attacks reveals 280 of recorded attacks target the manufacturing sector.     Full Report = https://lnkd.in/g3zif_KB     Bravo all to KnowBe4 including Cristiana Cavalcanti for the great work on #CyberSecurity

5

1 comentário

Newly emerged ransomware gang Qiulong has made waves in the past week, targeting a number of Brazilian organizations. The group's leak site contains information about each attack, naming the victim, the volume of data exfiltrated and a description of the data. A statement taunting the victim is also seen alongside this information. Although we do not know much about this new gang, its technical abilities are evident from its ability to target multiple victims and potentially compromise sensitive data. Could this be a ransomware gang to watch? Read more from Cyber Security News: https://lnkd.in/gjTjh-AE Want to keep an eye on newly emerged ransomware gangs in 2024? Check out our blog: https://lnkd.in/eUWCyNwk #ransomware #cybercrime #cybernews #cyberthreat #threatactors #cyberattack #cybercrime #Qiulong #dataexfiltration #datatheft #cybercriminals

8

#Verifying real #indicators of #compromise reducing #alert #fatigue. #Tuning and #customizing #rules for #detection should follow the #language of the #business.

1

According to our Advisory Board member, Paulo Pereira, this topic is highly disruptive to our daily lives. https://lnkd.in/da-xpiYX #infosec #cybersecurity #pentest #pentesting #hacking #hackers #opensource

3

🛡️ Google report reveals North Korean threat actors have been responsible for one-third of phishing activities in Brazil since 2020. These actors are targeting government, aerospace, tech, and financial sectors. Learn about their tactics: https://lnkd.in/g73JAkcT #cybersecurity

75

The Dark Night Online | FINANCIAL TERRORISM and CYBER WARFARE is very real and needs to become more common knowledge. We are already at war.

1

This special compendium of Wilson Mendes' technical articles will take you on a fascinating journey through the complexities of cybersecurity, and information protection. https://lnkd.in/dMYdFD2U #infosec #cybersecurity #pentest #pentesting #hacking #hackers #windows

1

Dr. Maher Magrabi presented at the ICA 2023 CPTED Conference in São Paulo, Brazil, on how Generative Pre-trained Transformer (GPT) models like ChatGPT and Copilot are reshaping security practices. Explore his latest article in the ICA Newsletter to uncover how AI is transforming security practices.    Key Highlights:    ⭐ Understanding GPTs: What they are and how they work.  ⭐ The importance of data diversity and the risks of biases.  ⭐ Limitations and strengths: Speed vs. accuracy.  ⭐ Practical applications for CPTED practitioners: Editing, brainstorming, summarising, and more.    #CPTED #ica #GenerativeAI #GPT #FireSafety #SecurityConsulting #SmartCities #loteconsulting 

8

🇧🇷 GNI is concerned about aspects of recent decisions made in the context of the #Brazilian Supreme Court inquiries on attacks to democracy, and calls on relevant Brazilian officials to ensure that the design and implementation of Brazilian law is consistent with the international human rights principles that #Brazil has subscribed to and meaningfully demonstrated leadership on. In particular, GNI is concerned about several aspects of the decision issued by Brazilian Supreme Court Justice Alexandre de Moraes against X Corporation (please note: X is not a member of GNI). Given the significant rule of law, freedom of expression, and privacy implications of these rulings, we hope the full Supreme Court will carefully review these matters to determine whether they meet the legality, necessity, and proportionality principles. Read the full statement: https://lnkd.in/gPPaXVkb

13

Nestle (Brazil) Hit by Data Breach, Employee Information Exposed: https://lnkd.in/dz8iH6dJ #databreach, #informationsecurity, #cybersecurity, #Nestle, #Brazil, #employee #privacy, #hacktivism, #informationleak, #securityawareness #ethicalempire

4

The ALTEQ Signature Scheme We will see the end of RSA, ECDSA and EdDSA sometime soon, as these signatures are not quantum robust. While Dilithium, Falcon and SPHINCS+ have been approved for standardisation, NIST is looking for alternatives for digital signatures. We see the Round 1 Additional Signatures competition. This includes: Multivariate Signatures (10): 3WISE, DME-Sign, HPPC (Hidden Product of Polynomial Composition), MAYO, ROV (PRovable unbalanced Oil and Vinegar), QR-UOV, SNOVA, TUOV (Triangular Unbalanced Oil and Vinegar), UOV (Unbalanced Oil and Vinegar), and VOX<. MPC-in-the-Head Signatures (7): Biscuit, MIRA, MiRitH (MinRank in the Head), MQOM (MQ on my Mind), PERK, RYDE, and SDitH (Syndrome Decoding in the Head). Lattice-based Signatures (6): EagleSign, EHTv3 and EHTv4, HAETAE, HAWK, HuFu (Hash-and-Sign Signatures From Powerful Gadgets), and SQUIRRELS ( Square Unstructured Integer Euclidean Lattice Signature). Code-based Signatures (5): CROSS (Codes and Restricted Objects Signature), Enhanced pqsigRM, FuLeeca, LESS (Linear Equivalence), MEDS (Matrix Equivalence Digital Signature). Symmetric-based Signatures (4): AIMer, Ascon-Sign, FAEST, and SPHINCS-alpha. Isogeny Signatures (1): SQIsign. But there are a few others that cannot be fitted into a core category: Other Signatures (4): ALTEQ, eMLE-Sig 2.0 (Embedded Multilayer Equations with Heavy Layer Randomization), KAZ-SIGN (Kriptografi Atasi Zarah), Preon, and Xifrat1-Sign. So, here's ALTEQ: https://lnkd.in/eP_BbX_t It supports extremely small private keys and reasonable performance levels.

27

1 comentário

NIST has updated its guidelines to help companies protect sensitive information when working with the federal government. These guidelines are found in two main documents, SP 800-171 and SP 800-171A. 🔹Clearer Rules: The updates make the rules easier to understand and follow. 🔹Feedback Included: NIST used feedback from the public to improve the guidelines. 🔹New Formats: The guidelines are now available in formats like JSON and Excel, making them easier to use with computer tools. 🔹Assessment Help: SP 800-171A helps companies check if they meet the security requirements. 🔹Future Updates: NIST will keep improving related guidelines for protecting important information and systems.

8

The importance of centralizing data and reporting a holistic risk score informed by business context: lessening the burden on security teams and getting leadership and developers on board with remediating what matters. Renan Dias shares some essentials for an efficient and effective AppSec program on #LTAPod #69: https://lnkd.in/guQ8cgHQ With LingRaj Patil #ASPM #riskscoring #securitydata

21