NSA Archives - Page 2 of 2

CISA: Threat actors behind SolarWinds hack pose ‘grave risk’ (updated)

Cloud Security, Configuration Management, Cybersecurity Attacks, Data Breach, Malware, Security Updates & Patches, Third-Party Security, Vulnerabilities & Exploits / Frank Crast / December 19, 2020 / APT, CISA, Cisco, Emergency Directive, Equifax, FireEye, Microsoft, NNSA, NSA, Nuclear, SolarWinds, Sunburst, Supply Chain, Symantec, Teardrop, UNC2452

The Cybersecurity and Infrastructure Security Agency (CISA) has warned the recent compromise by threat actors of SolarWinds poses a ‘grave risk’ to critical infrastructure, government and private sector organizations.

CISA: Threat actors behind SolarWinds hack pose ‘grave risk’ (updated) Read More »

NSA and FBI: watch out for Russian malware Drovorub

Cybersecurity Attacks / Frank Crast / August 14, 2020 / APT28, C2, Drovorub, Fancy Bear, FBI, GTsSS, Linux, malware, NSA, rootkit, Russia, STRONTIUM

The National Security Agency (NSA) and the Federal Bureau of Investigation (FBI) have released a joint cybersecurity alert for a new Russian malware dubbed Drovorub.

NSA and FBI: watch out for Russian malware Drovorub Read More »

Sandworm actors exploiting Exim MTA vulnerability

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / May 29, 2020 / CVE-2019-10149, Exim, MTA, NSA, Russia, Sandworm, SMTP

The National Security Agency (NSA) issued a new warning of Russian cyber actors exploiting an Exim Mail Transfer Agent (MTA) vulnerability CVE-2019-10149. The cyber attacks have been ongoing since last August.

Sandworm actors exploiting Exim MTA vulnerability Read More »

NSA: Guidance to mitigate cloud vulnerabilities

Cloud Security, Configuration Management, Cybersecurity Articles, Third-Party Security / Frank Crast / February 10, 2020 / Cloud, CSP, encryption, IAM, Key Management, least privilege, NSA, third party

The National Security Agency (NSA) has released guidelines to help organizations mitigate cloud vulnerabilities. The NSA document includes four classes of vulnerabilities at most risk to threat actors.

NSA: Guidance to mitigate cloud vulnerabilities Read More »

UPnProxy opens up networks to Eternal family of exploits

Cybersecurity Attacks, Malware, Vulnerabilities & Exploits / Frank Crast / December 3, 2018 / CVE-2017-0144, CVE-2017-7494, Eternal Silence, EternalBlue, EternalRed, malware, MS17-010, NSA, SambaCry, UPnP, UPnProxy, Vulnerabilities

Earlier this year, researchers from Akamai discovered attackers were abusing Universal Plug and Play (UPnP) vulnerabilities to conceal traffic, thus creating a malicious proxy system dubbed “UPnProxy.”

UPnProxy opens up networks to Eternal family of exploits Read More »

WannaMine Crypto-mining malware

Cybersecurity Attacks, Malware / Frank Crast / February 1, 2018 / Bitcoin, Cryptocurrency, Cryptomining, EternalBlue, Ethereum, Monero, MS17-010, NSA, WannaMine

Security firms have recently seen numerous attacks whose main objective is to infect systems with crypto-mining software in an effort to profit off the rise of cryptocurrencies, such as Bitcoin, Ethereum and Monero.

WannaMine Crypto-mining malware Read More »

6 Important Safeguards To Stop Insider Threats

Cybersecurity Articles, Insider Threats / Frank Crast / November 2, 2017 / AWS, Cloud, DLP, Eric Snowden, Insider Threat, NSA, Security Policy, Verizon

Insider threats can be malicious or inadvertant, but the consequences can lead to costly brand damage or significant financial losses to your company. Understanding the types of insider threats and corresponding risk indicators can help minimize impact and damage caused by such threats.

6 Important Safeguards To Stop Insider Threats Read More »

WannaCry ransomware attack on LG Electronics

Leave a Comment / Cybersecurity Attacks, Endpoint Security, Malware, Vulnerabilities & Exploits / Frank Crast / August 21, 2017 / Cryptocurrency, EternalBlue, MS17-010, NSA, Ransomware, SMB, Vulnerabilities, WannaCry, Windows

LG Electronics confirmed that WannaCry ransomware was responsible for last week’s infections that took down self-service kiosks.

WannaCry ransomware attack on LG Electronics Read More »