OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators

Revision 4 of NIST’s operational technology security guide is open for public comments until November 30.
The post OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators appeared first on SecurityWeek.
Continue reading OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators→

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.
The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek.
Continue reading AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft→

ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report

The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information. 
The post ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report appeared first on SecurityWeek.
Continue reading ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report→

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity

Abdelhamid Naceri, a former Microsoft Germany employee, is the exploit leaker Nightmare Eclipse, aka Chaotic Eclipse. 
The post Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity appeared first on SecurityWeek.
Continue reading Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity→

Only 13% of OT Network Segments Are Fully Isolated: Analysis

Forescout’s new network segmentation research shows that OT and medical devices often share network segments with other enterprise assets.
The post Only 13% of OT Network Segments Are Fully Isolated: Analysis appeared first on SecurityWeek.
Continue reading Only 13% of OT Network Segments Are Fully Isolated: Analysis→

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme

The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.
The post Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme appeared first on SecurityWeek.
Continue reading Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme→

Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal

The transaction is part of the $4.1 billion deal in which Accenture acquired a majority stake in Dragos in an OT cybersecurity push.
The post Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal appeared first on SecurityWeek.
Continue reading Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal→

Rust Team Members and Popular Crate Owners Targeted via Video Calls

It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North Korea.
The post Rust Team Members and Popular Crate Owners Targeted via Video Calls appeared first on SecurityWe… Continue reading Rust Team Members and Popular Crate Owners Targeted via Video Calls→