El malware BambooToken explota MQTT para ataques multiplataforma en Windows y Linux Descripción general del malware BambooToken Los investigadores en ciberseguridad han descubierto recientemente una nueva familia de malware, apodada BambooToken, que ha estado activa desde al menos febrero de 2023. Esta campaña de malware es notable por su uso del protocolo de Transporte de…
BambooToken Malware Exploits MQTT for Cross-Platform Attacks on Windows and Linux Overview of BambooToken Malware Cybersecurity researchers have recently unearthed a new family of malware, codenamed BambooToken, which has been active since at least February 2023. This malware campaign is notable for its use of the Message Queueing Telemetry Transport (MQTT) protocol, a lightweight messaging…
Microsoft’s AI Code of Conduct: Defining Boundaries for Cybersecurity in the Age of AI Background and Context The rapid advancement of artificial intelligence (AI) has transformed various sectors, including cybersecurity. As organizations increasingly rely on AI for defensive measures, the potential for misuse has sparked ethical and legal debates. The recent unveiling of Microsoft’s AI…
Red Heron Explota la Vulnerabilidad RCE de Gitea para Atacar a Organizaciones en Todo el Mundo Introducción al Incidente Una reciente violación de ciberseguridad descubierta por la Acronis Threat Research Unit (TRU) ha revelado las actividades de un actor de amenazas chino sospechoso conocido como Red Heron. Se informa que este grupo está aprovechando una…
Red Heron Exploits Gitea RCE Vulnerability to Target Organizations Worldwide Introduction to the Incident A recent cybersecurity breach uncovered by Acronis Threat Research Unit (TRU) has unveiled the activities of a suspected Chinese threat actor known as Red Heron. This group is reportedly taking advantage of a newly disclosed Remote Code Execution (RCE) vulnerability in…
DDRop Attack: A New Threat to Confidential Computing in Intel and AMD Systems Background and Context The landscape of cybersecurity is constantly evolving, with threats becoming increasingly sophisticated and varied. One of the most significant advancements in recent years has been the rise of **confidential computing**, a technology designed to protect sensitive data while it…
Aumento de las Amenazas de Phishing con Claves de Acceso que Apuntan a Cuentas de Microsoft Cloud Introducción a la Amenaza Cibernética Microsoft ha revelado recientemente información crítica sobre dos alarmantes campañas de phishing que utilizan tácticas de ingeniería social con temas de claves de acceso. Estos ataques están dirigidos específicamente a infiltrar cuentas de…
Increased Passkey Phishing Threats Target Microsoft Cloud Accounts Introduction to the Cyber Threat Microsoft has recently revealed critical insights about two alarming phishing campaigns that leverage passkey-themed social engineering tactics. These attacks are specifically aimed at infiltrating Microsoft cloud accounts, leading to potential financial fraud and data exfiltration. The sophistication of these methods raises significant…
Passkey Phishing Attacks: A New Threat to Microsoft Cloud Accounts Background and Context In the evolving landscape of cybersecurity, the recent disclosure by Microsoft regarding two phishing campaigns underscores the persistent risk posed by cybercriminals. As organizations increasingly shift to cloud-based services, the attack surface grows, making them prime targets for sophisticated threats. The campaigns…
CISA Señala Vulnerabilidades Críticas en Artifactory, ScreenConnect y RouterOS como Actívamente Explotadas Introducción al Catálogo KEV de CISA La Agencia de Ciberseguridad y Seguridad de Infraestructura de EE. UU. (CISA) desempeña un papel crucial en la mejora de la ciberseguridad en varios sectores de los Estados Unidos. Una de sus iniciativas clave es el establecimiento…