Mert SARICA

A sophisticated phishing attack targeting a Turkish defense sector organization was recently uncovered by security researchers, shedding light on the evolving tactics of threat actor TA397, also known as “Bitter.” https://lnkd.in/g9YVYycg

1

📊 Sharpen your OSINT knowledge with the SANS OSINT Poster! Packed with everything from IP geolocation tools to advanced search queries, this resource will help you uncover the data you need for thorough investigations. 🕵️‍♀️ Download your copy here: https://lnkd.in/e45ZAg3c #OSINT #CyberIntel

11

1 Comment

New Post: #CISA and @FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate Directory #Traversal Vulnerabilities - https://lnkd.in/dAir6seU CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate Directory Traversal Vulnerabilities 05/02/2024 02:00 PM EDT Today, CISA and the Federal Bureau of Investigation (FBI) released a joint Secure by Design Alert, Eliminating Directory Traversal Vulnerabilities in Software. This Alert was crafted in response to recent well-publicized threat actor campaigns that exploited directory traversal vulnerabilities in software (e.g., CVE-2024-1708, CVE-2024-20345) to compromise users of the software—impacting critical infrastructure sectors, including the Healthcare and Public Health Sector. Additionally, this Alert highlights the prevalence, and continued threat actor exploitation of, directory traversal defects. Currently, CISA has listed 55 directory traversal vulnerabilities in our Known Exploited Vulnerabilities (KEV) catalog. Approaches to avoid directory traversal vulnerabilities are known, yet threat actors continue to exploit these vulnerabilities which have impacted the operation of critical services, including hospital and school operations. CISA and the FBI urge software manufacturer executives to require their organizations to conduct formal testing to determine their products’ susceptibility to directory traversal vulnerabilities. For more information on recommended principles and best practices to achieve this goal, visit CISA’s Secure by Design page. To catch up on the publications in this series, visit Secure by Design Alerts. Robert Williams#News247WorldPress

1

Have you had the chance to read the OSINT Handbook yet? If not, we’ve included a sample below so you can take a look inside. Download it now to get insights on current OSINT best practices and unlock better investigations: https://lnkd.in/eCT4RdCw #OSINT #OSINTTechniques #Investigations

3

The latest update for #Trustwave includes "UK Must Prioritize #Cybersecurity Governance Amidst Rising Threat of Cybercrime" and "7-Step Guide to Properly Scoping an Offensive Security Program". #MDR #infosec #ThreatIntelligence https://lnkd.in/dAFsV2s9

1

How can you become an even more valuable #OSINT investigator? Draw insights from reputable professionals and enthusiasts who share their experiences and case studies on blogs and forums. But remember, success comes from replicating those use cases yourself! Discover more investigator tips and download a list of 15 reliable OSINT and #CTI organizations to follow NOW: https://lnkd.in/geT44GKf

17

1 Comment

August Threat Intelligence Report Now Available 🚨 The latest data shows that threat actors like Kimsuky and SharpPanda are actively targeting industries across Asia, while Black Basta and LockBit Black continue to pose significant risks globally. Key Findings: ✔️ 60+ active malware families identified, including new variants targeting critical sectors. ✔️ 24% of simulated threats remain unblocked by current defenses—leaving critical gaps. Understand where your security stands compared to industry benchmarks. Get the actionable insights you need to reinforce your defenses against these emerging threats. Access the full report here: https://hubs.li/Q02KT_Dz0 #CyberSecurity #ThreatIntel #ThreatActors #CTI

51

1 Comment

When it comes to Cyber Risk, did you know Kroll is the world’s #1 incident response provider? Follow our Kroll Cyber Risk showcase page for: 💡 Insights 💼 Case studies 📈 Latest trends 🗓 Upcoming events ⚠ High-severity vulnerabilities ✅ Solutions and much more!

48

Known Exploited Vulnerabilities Remain Unmitigated Past Deadlines: - Critical severity KEVS took nearly 4.5 months (137 median days) - High severity vulnerabilities take more than 9 months (238 median days) - Medium severity vulnerabilities take nearly 1.5 years (517 median days) https://lnkd.in/g_RExD96

1

Wrapping up Q3, the Vulcan Cyber | Own exposure risk quarterly vulnerabilities report is released. Get a FREE copy here >> https://lnkd.in/eSXFUjNz   Read about the most notable vulnerabilities of the quarter, trending topics, and more.

28

2 Comments

Advanced OSINT training to go way beyond theory, focussing on the practical application of new skills and knowledge to find your way in the global open source information landscape to produce actionable results. https://lnkd.in/eiczW2P9 #OSINT #OSINTtraining

1

The latest update for #archTIS includes "DFARS 7012 Class Deviation and #NIST 800-171 Rev 3 Guidance for DIBs". #cybersecurity #securecollaboration #dataprotection https://lnkd.in/eXu7rZ85

1

S2W's Threat Intelligence Center has published a brief analysis report on the #Handala Group. The report details Handala's claim of responsibility for the #Israeli supply chain attack related to the Hezbollah walkie-talkie explosion incident. If you're interested in the full report, please reach out through the contact information below, and we will respond to you. 👉 Contact us: https://bit.ly/3ZG9MNb ✅ Report Title:

The Handala Group claims responsibility for an Israeli supply chain attack involving the explosion of Hezbollah's walkie-talkies.

 ✅ Executive Summary: The Handala hacking group, active on DDW, claims on forums like BreachForums and Ramp that the Israeli shell companies Vidisco and IIB are linked to Hezbollah's walkie-talkie explosion incident. The connection between Vidisco and IIB (Israeli Industrial Batteries) has not been officially confirmed, and further verification is required to establish the credibility of this link. 
📌 What is the #Hezbollah walkie-talkie explosion incident? The Hezbollah walkie-talkie explosion incident, as reported by The #NewYorkTimes, resulted in 37 deaths and about 3,000 injuries. #Iran's ambassador to #Lebanon, Mojtaba Amani, was among the injured. The batteries in the exploded walkie-talkies were labeled with "Gold Apollo," a Taiwanese brand initially suspected to be behind the attack. However, Gold Apollo denied any connection to terrorism, stating that the batteries were actually produced by BAC Consulting, a Hungarian company licensed to use their brand. Hungary's government later clarified that BAC Consulting was merely a trade intermediary without manufacturing facilities. According to The New York Times, BAC Consulting was revealed to be a shell company set up by Israel in Hungary. Israel had been operating BAC Consulting for several years, posing as a walkie-talkie manufacturer and producing devices for general public use. After years of deception, they managed to supply walkie-talkies to Hezbollah. Since 2022, these devices, equipped with specially made batteries, were secretly exported to Lebanon, awaiting the right moment for sabotage. 👉 Contact us: https://bit.ly/3ZG9MNb #Intelligence #Bigdata #Security #AI #Cybersecurity #Darkweb #Telegram #Securityintelligence #AIsecurity #IT #Hacking #DarkBERT #S2W

7

The latest update for #BitSight includes "7 Types of exposures to manage beyond CVEs" and "Race to KEV Remediation: Who Tops the Charts in Europe?". #Cybersecurity #RiskManagement https://lnkd.in/eqd6WtE9

1

ISMG editors discussed the strategic convergence of data security posture management and data loss prevention #technologies, evolving priorities of security leaders and the urgent readiness challenges posed by the NIS2 Directive. Watch: https://lnkd.in/d5i6Xakm #ISMGNews #cybersecurity Anna Delaney Tony Morbin Tom Field Michael Novinson

11