Security.Studio, CyberSecurity, Cybersecuritynews

08/01/2023

😨 OPWNAI : CYBERCRIMINALS STARTING TO USE CHATGPT

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

☝️ At the end of November 2022, released ChatGPT, the new interface for its Large Language Model (LLM), which instantly created a flurry of interest in AI and its possible uses. However, ChatGPT has also added some spice to the modern cyber threat landscape as it quickly became apparent that code generation can help less-skilled threat actors effortlessly launch cyberattacks.



https://lnkd.in/dYQX_HFj

Latest Research by our Team

05/01/2023

☝️ BLINDEAGLE TARGETING ECUADOR WITH SHARPENED TOOLS

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

👀 HIGHLIGHTS:
* APT-C-36, also known as Blind Eagle, is a financially motivated threat group that has been launching indiscriminate attacks against citizens of various countries in South America since at least 2018.
* In a recent campaign targeting Ecuador based organizations, CPR detected a new infection chain that involves a more advanced toolset.
* The backdoor chosen for this campaign is typically used by espionage campaigns, which is unusual for this group



https://lnkd.in/gCqSGaim

Latest Research by our Team

05/01/2023

Why Data Hygiene is Key to Industrial Cybersecurity

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

👀 How can highly distributed organizations with complex, integrated supply chains defend against cyber threats? By practicing good data hygiene based on zero-trust principles.



https://lnkd.in/g-WCUZNX

In this article, learn how data hygiene plays a big role in industrial cybersecurity

05/01/2023

☝️ Unraveling the techniques of Mac ransomware

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

👀 Ransomware continues to be one of the most prevalent and impactful threats affecting organizations, with attackers constantly evolving their techniques and expanding their tradecraft to cast a wider net of potential targets. This is evident in the range of industries, systems, and platforms affected by ransomware attacks. Understanding how ransomware works across these systems and platforms is critical in protecting today’s hybrid device and work environments.



https://lnkd.in/d_FV8sXE

Understanding how Mac ransomware works is critical in protecting today’s hybrid environments. We analyzed several known Mac ransomware families and highlighted these families’ techniques, which defenders can study further to prevent attacks.

21/12/2022

Microsoft research uncovers new Zerobot capabilities

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

🎁 Botnet malware operations are a constantly evolving threat to devices and networks. Threat actors target Internet of Things (IoT) devices for recruitment into malicious operations as IoT devices’ configurations often leave them exposed, and the number of internet-connected devices continue to grow. Recent trends have shown that operators are redeploying malware for a variety of distributions and objectives, modifying existing botnets to scale operations and add as many devices as possible to their infrastructure.



https://lnkd.in/e4F9eau4

The Microsoft Defender for IoT research team details information on the recent distribution of a Go-based botnet, known as Zerobot, that spreads primarily through IoT and web-application vulnerabilities.

19/12/2022

🎄 OpwnAI: AI That Can Save the Day or HACK it Away

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

🎁 Due to ChatGPT, OpenAI’s release of the new interface for its Large Language Model (LLM), in the last few weeks there has been an explosion of interest in General AI in the media and on social networks. This model is used in many applications all over the web and has been praised for its ability to generate well-written code and aid the development process. However, this new technology also brings risks. For instance, lowering the bar for code generation can help less-skilled threat actors effortlessly launch cyber-attacks.



https://lnkd.in/dzhcJrpw

Research by: Sharon Ben-Moshe, Gil Gekker, Golan Cohen Introduction Due to ChatGPT, OpenAI’s release of the new interface for its Large Language Model (LLM), in the last few weeks there has been an explosion of interest in General AI in the media and on social networks. This model is used in many ...

15/12/2022

🎄 MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

⭕️ Malware operations continue to rapidly evolve as threat actors add new capabilities to existing botnets, increasingly targeting and recruiting new types of devices. Attackers update malware to target additional operating systems, ranging from PCs to IoT devices, growing their infrastructure rapidly. The Microsoft Defender for IoT research team recently analyzed a cross-platform botnet that originates from malicious software downloads on Windows devices and succeeds in propagating to a variety of Linux-based devices.



https://lnkd.in/dE-Vj8Uk

15/12/2022

🎄 Attackers Set Sights on Active Directory: Understanding Your Identity Exposure

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

🎉 Identify the architectural limitations of Microsoft Active Directory by assessing identity threats with CrowdStrike’s complimentary Active Directory Risk Review



https://lnkd.in/dDjCaJdu

Learn how to identify the architectural limitations of Microsoft Active Directory by assessing identity threats with CrowdStrike’s complimentary Active Directory Risk Review.

15/12/2022

🎄 Ransomware Business Models: Future Pivots and Trends

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

🎉 Ransomware groups and their business models are expected to change from what and how we know it to date. In this blog entry, we summarize from some of our insights the triggers that spark the small changes in the short term (“evolutions”) and the bigger deviations (“revolutions”) they can redirect their criminal enterprises to in the long run.



https://lnkd.in/dzgZTdap

Ransomware groups and their business models are expected to change from what and how we know it to date. In this blog entry, we summarize from some of our insights the triggers that spark the small changes in the short term (“evolutions”) and the bigger deviations (“revolutions”) they can re...

14/12/2022

🎄 SMS Scams Exposed: A Look at Ongoing Campaigns Worldwide

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

🎉 SMS phishing might not sound like much of a threat. People could think that, after all, who still uses SMS nowadays? In reality, though, SMS remains a vital channel of communication for many businesses and even some institutions. Criminals often try to spread their fraudulent campaigns using SMS and messages relevant to our times.



https://lnkd.in/djDm49au

SMS phishing might not sound like much of a threat.

14/12/2022

🎄 Probing Weaponized Chat Applications Abused in Supply-Chain Attacks

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

⭕️ This report examines the infection chain and the pieces of malware used by malicious actors in supply-chain attacks that leveraged trojanized installers of chat-based customer engagement platforms.



https://lnkd.in/dG5TbGvB

Use the CRI to assess your organization’s preparedness against attacks, and get a snapshot of cyber risk across organizations globally.

14/12/2022

🎄 4 things to look for in a multicloud data protection solution

✅ In the modern world, it is very important to ensure the cybersecurity of the company. Visit our site https://security.studio, we will help you build information security.

🎉 What does it mean to be a multicloud organization? As the name implies, the term describes a model of cloud computing where an organization uses multiple clouds—two or more public clouds, private clouds, or a combination of public, private, and edge clouds—to distribute applications and services. Subscribing to multiple cloud vendors can help your business access best-of-breed solutions along with competitive pricing.



https://lnkd.in/gDYxe3mV

Discover four solutions for multicloud data protection and how Microsoft Purview helps unify security, compliance, and data protection.