Threat Source newsletter (Oct. 6, 2022) — Continuing down the Privacy Policy rabbit hole
Any time we welcome this software and hardware into our homes and on our devices, it’s worth considering what sacrifices we might be making elsewhere.
Developer account body snatchers pose risks to the software supply chain
Cisco Talos examined several frequently used code repositories. We looked specifically at the security afforded to developer accounts, and how difficult it would be for an attacker to take over a developer account.
Researcher Spotlight: Globetrotting with Yuri Kramarz
“You have completely different angles in preparing different customers for defense during major global events depending on their role, technology and function,” Kramarz said.
Threat Advisory: Microsoft warns of actively exploited vulnerabilities in Exchange Server
Even organizations that use Exchange Online may still be affected if they run a hybrid server.
Threat Roundup for September 23 to September 30
Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 23 and Sept. 30.
Threat Source newsletter (Sept. 29, 2022) — Personal health apps are currently under a spotlight, but their warning signs have always been there
A report from the Washington Post also released last week found that this app, as well as popular health sites like WebMD, “gave advertisers the information they’d need to market to people, or groups of consumers based on their health concerns.”
New campaign uses government, union-themed lures to deliver Cobalt Strike beacons
Cisco Talos recently discovered a malicious campaign with a modularised attack technique to deliver Cobalt Strike beacons on infected endpoints.
Threat Roundup for September 16 to September 23
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 16 and Sept. 23.
Threat Source newsletter (Sept. 22, 2022) — Attackers are already using student loan relief for scams
The Better Business Bureau and the U.S. Federal Trade Commission both released warnings over the past few weeks around fake offers, scams and website links related to the debt forgiveness plan, with which some borrowers will have up to $20,000 worth of loans forgiven.