Freddy Macho’s Post

From Health-ISAC's Daily Cyber Headline: https://lnkd.in/eZwvUWjN Cybersecurity researchers from Trend Micro have observed the nation-state threat actor Earth Baku expanding its area of operations beyond the APAC region. APT41 has been observed using public-facing network applications in target environments, such as internet information services (IIS) server endpoints, to deploy the Godzilla web shell. Once this web shell is deployed, Earth Baku has been observed installing loaders to deploy command and control (C2) beacons in target networks. These beacons allow for post exploitation activities such as data theft. Health-ISAC Members are advised to encrypt sensitive data to minimize the risk posed by data exfiltration. Additionally, Health-ISAC Members in Europe and the Middle East are advised to take inventory of public-facing applications that may be targeted by Earth Baku, and make sure input validation measures are in place to minimize risk of exploitation. 

According to a South Korean cybersecurity expert on Wednesday, cyber, space, and artificial intelligence technologies are becoming increasingly intertwined. This convergence necessitates a more integrated approach to assessing threats among emerging technologies. Yoon Jung-hyun, a research fellow at the Center for Science, Technology, and Cybersecurity at the Institute for National Security Strategy (INSS), highlighted that the world is entering an era of “emerging security.” He pointed out that as modern technologies increasingly influence daily life, their integration could pose substantial security threats that need to be addressed at a national level. Yoon’s comments were made during the National Strategy for Space Cyber Security event, which was co-hosted by the Korean Academy of Space Security and the Korea Association of Cybersecurity Studies. #space #cyber #security #AI #threat #emerging #technology https://lnkd.in/g9mgYEvd

Catch the latest edition of the 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 & 𝐈𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧 𝐒𝐲𝐬𝐭𝐞𝐦𝐬 𝐃𝐢𝐠𝐞𝐬𝐭! Highlighting the latest research and development trends throughout the #cybersecurity community, our digest features: 🔺 A notable technical inquiry on #AI & #ML technologies in China 🔺A subject matter expert in model-based systems engineering 🔺A listing of upcoming #DoD cyber events 🔺The latest DoD news on Zero Trust, artificial intelligence evaluations and safeguards, cybersecurity resources, and more. To view, click here: https://buff.ly/3xGBWfs. #AIML #MBSE #zerotrust #usgovernment #usmilitary #scienceandtechnology

Our new webinar, "Emerging Technologies and Homeland Security," discusses the challenges and opportunities emerging technologies present to homeland security, covering topics such as cyber threats, ransomware, and drone misuse. You can now add this webinar to your organization's subscription with our All Access Webinar Package or purchase it as an individual learner. This webinar was presented by Ryan Jenkins. https://loom.ly/N-gK0lE #HomelandSecurity #CyberThreats #EmergingTech

Researchers at industrial cybersecurity provider Claroty have discovered a new tool nation-state cyber threat actors use to attack civilian critical infrastructure. #cybersecurity https://lnkd.in/dr_qSdUi

**🔍 FBI Alert: HiatusRAT Targets IoT Devices** The FBI warns of HiatusRAT scans exploiting Chinese-made surveillance cameras and DVRs. Active since July 2022, this malware utilizes compromised routers for data collection and C2 operations. Recent attacks include targeting U.S. military systems and Taiwanese entities. Vulnerabilities like CVE-2017-7921 are exploited, with a focus on weak passwords. 🛡️ #Cybersecurity #IoTSecurity #FBI #HiatusRAT #NetworkSecurity #VulnerabilityManagement

'Southeast Asia reiterates pledge to collaborate amid growing cyber threats in AI era'. The ZDNET article discusses Southeast Asian nations reaffirming their commitment to collaborate on cybersecurity amidst rising threats in the AI era. At the 9th ASEAN Ministerial Conference on Cybersecurity, a new CERT (Computer Emergency Response Team) facility was launched in Singapore to enhance information sharing and best practices among member states. This initiative aims to strengthen national cybersecurity capacities and establish a network of experts. The article highlights the increasing prevalence of ransomware attacks and emphasizes the necessity of international cooperation to safeguard the digital landscape. Ministers stressed the importance of building trust in the digital ecosystem, especially given the complexities introduced by AI advancements. https://lnkd.in/g5YWYhzr #CyberSecurity

In an age of increasing geopolitical tensions caused by actual wars, and the threat of Chinese action against Taiwan, OT is a target that cannot be ignored by nation states. The post Cyber Insights 2024: OT, ICS and IIoT appeared first on SecurityWeek.

18 Oct 2024 : Most Active Threat Indicators #Cybersecurity #Cyberattack #RCE #Botnet #IOC Top 3 Source Countries: - Egypt (EG): The leading source of cyber attacks, primarily utilizing the Mirai botnet for various malicious activities, indicating a significant presence in exploiting IoT vulnerabilities. - United States (US): Involved in multiple scanning and probing activities, employing tools like ZGrab and Nmap to identify potential vulnerabilities in systems. - China (CN): Actively participating in attacks, particularly targeting routers and devices with command injection vulnerabilities, showcasing a strong focus on exploiting network weaknesses. Source IP 3[.]26[.]100[.]93 179[.]43[.]191[.]98 27[.]223[.]130[.]128 110[.]41[.]37[.]225 221[.]15[.]189[.]205 27[.]43[.]205[.]16 111[.]23[.]125[.]201 114[.]55[.]89[.]49 178[.]128[.]197[.]152 68[.]183[.]68[.]103 130[.]61[.]236[.]31 41[.]107[.]76[.]196 197[.]37[.]209[.]202 197[.]36[.]145[.]164 197[.]56[.]50[.]154 197[.]58[.]19[.]34 197[.]58[.]121[.]177 156[.]223[.]84[.]49 197[.]55[.]88[.]114 41[.]40[.]131[.]135 197[.]58[.]135[.]226 197[.]57[.]160[.]65 156[.]213[.]19[.]171 41[.]234[.]170[.]88 156[.]193[.]37[.]249 156[.]222[.]203[.]17 41[.]233[.]139[.]47 156[.]204[.]233[.]60 41[.]35[.]131[.]247 156[.]196[.]135[.]95 197[.]49[.]128[.]251 197[.]39[.]147[.]198 156[.]196[.]62[.]198 41[.]234[.]79[.]37 156[.]192[.]165[.]22 156[.]196[.]44[.]240 156[.]222[.]252[.]3 197[.]52[.]67[.]243 156[.]220[.]134[.]254 41[.]42[.]211[.]139 41[.]239[.]121[.]32 156[.]212[.]8[.]133 197[.]52[.]171[.]181 197[.]42[.]190[.]234 41[.]46[.]166[.]108 41[.]234[.]32[.]26 41[.]36[.]1[.]242 41[.]47[.]223[.]8 197[.]33[.]249[.]67 41[.]37[.]1[.]161 197[.]60[.]102[.]69 197[.]49[.]149[.]171 41[.]37[.]191[.]14 197[.]49[.]66[.]67 197[.]49[.]92[.]222 156[.]194[.]252[.]124 41[.]35[.]175[.]76 197[.]46[.]95[.]137 197[.]49[.]228[.]71 197[.]53[.]252[.]173 196[.]190[.]14[.]77 178[.]215[.]236[.]209 36[.]83[.]237[.]144 103[.]143[.]212[.]58 59[.]178[.]158[.]152 103[.]15[.]252[.]7 43[.]251[.]81[.]76 117[.]195[.]85[.]53 45[.]115[.]89[.]93 117[.]201[.]179[.]40 117[.]209[.]25[.]30 59[.]183[.]246[.]55 175[.]101[.]15[.]245 103[.]15[.]255[.]75 27[.]111[.]75[.]142 117[.]195[.]188[.]141 59[.]96[.]213[.]44 143[.]244[.]133[.]239 146[.]158[.]127[.]185 92[.]223[.]85[.]247 151[.]192[.]65[.]10 8[.]220[.]201[.]94 119[.]74[.]53[.]34 178[.]211[.]139[.]188 138[.]2[.]155[.]25 167[.]94[.]138[.]115 52[.]228[.]154[.]220 24[.]129[.]210[.]91 45[.]156[.]130[.]43 18[.]117[.]126[.]5 206[.]168[.]34[.]206 199[.]45[.]154[.]144 3[.]145[.]149[.]147 3[.]134[.]245[.]23 18[.]118[.]106[.]22 13[.]91[.]182[.]170 13[.]64[.]111[.]114 18[.]224[.]17[.]218 172[.]206[.]139[.]14 75[.]133[.]180[.]154