⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A multi-stage attack leveraging malicious LNK files and the TON blockchain was discovered by LevelBlue SpiderLabs. The attack begins with a ZIP file containing a Windows shortcut (LNK) that executes a hidden PowerShell command to download a legitimate Node.js binary, which then deploys a backdoor.
The LevelBlue Managed Threat Research team investigated a security alert in a customer environment involving a malicious ZIP file containing a Windows shortcut (.lnk) used for initial execution.
LevelBlue, a cybersecurity company, has open-sourced its advanced Linux Security Module (LSM) called owLSM, aiming to benefit the broader security community. The owLSM is designed to enhance Linux kernel security by providing advanced monitoring and enforcement capabilities, addressing vulnerabilities that traditional security mechanisms may miss.
LevelBlue's SpiderLabs has open-sourced its advanced Linux security engine, owLSM, marking a significant contribution to the cybersecurity community. The move aims to encourage broader adoption and collaboration among security vendors by making this high-level security technology freely available.
Russian FSB Center 16 cyber actors exploit poorly configured networking devices worldwide. A joint cybersecurity advisory from multiple agencies provides TTPs to counter the threat.
Russian Government-Sponsored Activity Targets Poorly Configured and Vulnerable Devices Across Critical Sectors Executive summary Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, opportunistically...