CISA, NSA offer guidance to better protect Microsoft Exchange Servers

The guide includes security advice previously shared by Microsoft, yet authorities felt it prudent to outline best practices for the critical and widely used technology.

The post CISA, NSA offer guidance to better protect Microsoft Exchange Servers appeared first on CyberScoop.

Continue reading CISA, NSA offer guidance to better protect Microsoft Exchange Servers→

Alleged 764 member faces up to 69 years in prison for string of suspected violent crimes

Prosecutors accuse Tony Christopher Long of animal crushing, sexual exploitation of a minor, cyberstalking and extortion.

The post Alleged 764 member faces up to 69 years in prison for string of suspected violent crimes appeared first on CyberScoop.

Continue reading Alleged 764 member faces up to 69 years in prison for string of suspected violent crimes→

F5 asserts limited impact from prolonged nation-state attack on its systems

The networking software and security company claims most customers are not concerned about their configuration data stolen during the attack.

The post F5 asserts limited impact from prolonged nation-state attack on its systems appeared first on CyberScoop.

Continue reading F5 asserts limited impact from prolonged nation-state attack on its systems→

Attackers bypass patch in deprecated Windows Server update tool

Microsoft addressed the critical vulnerability earlier this month, but had to issue an emergency update to resolve issues it previously missed.

The post Attackers bypass patch in deprecated Windows Server update tool appeared first on CyberScoop.

Continue reading Attackers bypass patch in deprecated Windows Server update tool→

North Korea’s Lazarus group attacked three companies involved in drone development

The attacks, which involved fake job offers as a social engineering lure, were likely aimed at stealing proprietary information about drone manufacturing, ESET said in a report.

The post North Korea’s Lazarus group attacked three companies involved in drone development appeared first on CyberScoop.

Continue reading North Korea’s Lazarus group attacked three companies involved in drone development→

Researchers track surge in high-level Smishing Triad activity

The China-linked operation has grown from a phishing kit marketplace into an active and growing community supporting a decentralized large-scale phishing ecosystem.

The post Researchers track surge in high-level Smishing Triad activity appeared first on CyberScoop.

Continue reading Researchers track surge in high-level Smishing Triad activity→

Researchers uncover remote code execution flaw in abandoned Rust code library

The high-severity defect affects a widely used — but largely hidden — archive tool that spans many forks.

The post Researchers uncover remote code execution flaw in abandoned Rust code library appeared first on CyberScoop.

Continue reading Researchers uncover remote code execution flaw in abandoned Rust code library→

China’s spy agency accuses NSA of yearslong attack on the country’s timekeeping service

The NSA did not confirm nor deny the allegations made by China’s Ministry of State Security. China said the origins of the attack date back to March 2022.

The post China’s spy agency accuses NSA of yearslong attack on the country’s timekeeping service appeared first on CyberScoop.

Continue reading China’s spy agency accuses NSA of yearslong attack on the country’s timekeeping service→

Europol dismantles cybercrime network linked to $5.8M in financial losses

Authorities arrested seven people allegedly involved in the operation and seized 1,200 SIM boxes containing 40,000 active SIM cards.

The post Europol dismantles cybercrime network linked to $5.8M in financial losses appeared first on CyberScoop.

Continue reading Europol dismantles cybercrime network linked to $5.8M in financial losses→

North Korean operatives spotted using evasive techniques to steal data and cryptocurrency

Research from Cisco Talos and Google Threat Intelligence Group underscores the extent to which North Korea-aligned attackers attempt to avoid detection.

The post North Korean operatives spotted using evasive techniques to steal data and cryptocurrency appeared first on CyberScoop.

Continue reading North Korean operatives spotted using evasive techniques to steal data and cryptocurrency→