Mike Stevens (Page 28)

Information security specialist, currently working as risk infrastructure specialist & investigator.
15 years of experience in risk and control process, security audit support, business continuity design and support, workgroup management and information security standards.

What Steps Should You Take Before, During and After a DDoS Attack as per FBI, CISA AND MS-IAC?

On: October 31, 2022

In: Cyber Security

Tagged: Cyberattack, cybersecurity, DDoS Mitigation, Denial of Service (DoS) attack, Information Security

This joint guide from the Federal Bureau of Investigation (FBI), the Multi-State Information Sharing and Analysis Center (MS-ISAC), and the Cybersecurity and Infrastructure Security Agency (CISA) aims to give organizationsRead More →

New York Post’s website and Twitter account hacked

On: October 27, 2022

In: Data Breach

Tagged: Cyberattack, cybercrime, cybersecurity, Hacking

After the hackers exploited the New York Post’s website and Twitter account to post derogatory headlines and messages directed at American lawmakers, the publication today acknowledged that it had beenRead More →

How this simple GitHub flaw allowed threat actors to do Repojacking (taking over others repositories and poising them with malware)

On: October 26, 2022

In: Vulnerabilities

Tagged: cybersecurity, GitHub, Information Security, security flaws, vulnerability

GitHub has fixed a flaw that might have allowed hackers to take over one of its repositories and possibly infect all the software and other programs that depended on it.Read More →

These Two strains of point-of-sale (POS) malware(MajikPOS and Treasure Hunter) are stealing details of credit cards from payment terminals

On: October 25, 2022

In: Virus

Tagged: cybersecurity, Information Security, malware, security flaws

The Group-IB Threat Intelligence discovered the MajikPOS POS malware’s Command and Control (C2) server on April 19, 2022. C&C was found to be inadequately structured, and the manner it hadRead More →

For businesses that fail to secure consumers’ personal data, Australia will impose up to AU$50 million or 30% of company’s revenue as fine

On: October 24, 2022

In: Cyber Security

Tagged: Cyberattack, cybersecurity, data breach, Information Security

After two significant cybersecurity breaches exposed millions of people to criminal activity, Australia on Saturday recommended stiffer sanctions for businesses that fail to secure consumers’ personal data. According to changesRead More →

A 23 year old hacker who stole unreleased songs from Ed Sheeran and other 89 musicians sold them on the dark web has been jailed for 18 months

On: October 21, 2022

In: Cyber Security

Tagged: cybersecurity, Hacking, incidents

Sheeran’s music and 12 tracks by the rapper Lil Uzi Vert were exchanged for bitcoin by Adrian Kwiatkowski. The 23-year-old Ipswich resident was able to access them by breaking intoRead More →

Oracle released patches for 370 vulnerabilities and 200 of them are remotely exploitable. Patch now

On: October 19, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), cybersecurity, Information Security, oracle, vulnerability

Oracle released 370 fixes as part of its quarterly batch of security upgrades . More than 50 critical-severity flaws are fixed by the October 2022 Critical Patch Update (CPU). OverRead More →

Cobalt Strike software contains a critical remote code execution (RCE) vulnerability that might allow anyone to take over victim systems

On: October 18, 2022

In: Vulnerabilities

Tagged: Cobalt Strike, Common Vulnerability Scoring System (CVSS), cybersecurity, Information Security

A red-team architecture called Cobalt Strike is mostly used for simulating adversaries. The new vulnerability (tracked CVE-2022-42948) affects Cobalt Strike version 4.7.1 and results from an insufficient patch that HelpSystemsRead More →

New UEFI rootikit malware blacklotus of just 80 kb in size allows hacking computers forever, even after hard drive is removed and that just for $5000

On: October 17, 2022

In: Virus

Tagged: blacklotus, cybersecurity, Hacking, malware, vulnerability

Security expert Scott Scheferman warns that a threat actor is marketing on dark web forums a vendor-independent UEFI rootkit that has the ability to bypass antivirus software and controls. TheRead More →