Security
FireEye Cyber Threat Map
The FireEye Cyber threat map provides a visual overview of the source and destination countries of various internet attacks and attack attempts. It also provides insight into the top industries which are currently experiencing these attacks and/or attempted attacks. Click the link below to view the map in real-time.
US-CERT Current Activity
-
Drupal Releases Security Updates
Original release date: April 17, 2019 | Last revised: April 18, 2019
Drupal has released security updates to address multiple vulnerabilities in Drupal Core. A remote attacker could exploit some of these vulnerabilities to take control...
-
Cisco Releases Security Updates
Original release date: April 17, 2019
Cisco has released a security update to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected...
-
ICSJWG Spring Meeting April 23–25
Original release date: April 17, 2019
The Industrial Control Systems Joint Working Group (ICSJWG)—a collaborative and coordinating body operating under the Critical...
Krebs on Security
-
Marcus “MalwareTech” Hutchins Pleads Guilty to Writing, Selling Banking Malware
Marcus Hutchins, a 24-year-old blogger and malware researcher arrested in 2017 for allegedly authoring and selling malware designed to steal online banking credentials, has pleaded guilty to criminal charges of conspiracy and to making, selling or...
-
Wipro Intruders Targeted Other Major IT Firms
The criminals responsible for launching phishing campaigns that netted dozens of employees and more than 100 computer systems last month at Wipro, India's third-largest IT outsourcing firm, also appear to have targeted a number of other competing...
-
How Not to Acknowledge a Data Breach
I'm not a huge fan of stories about stories, or those that explore the ins and outs of reporting a breach. But occasionally it seems necessary to publish such accounts when companies respond to a breach report in such a way that it's crystal clear...
Security Alerts
-
AA19-024A: DNS Infrastructure Hijacking Campaign
Original release date: January 24, 2019 | Last revised: February 13, 2019
Summary
The National Cybersecurity and Communications Integration Center (NCCIC), part of the Cybersecurity and Infrastructure Security Agency...
-
AA18-337A: SamSam Ransomware
Original release date: December 03, 2018
Summary
The Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) and the Federal Bureau of Investigation (FBI) are issuing...
-
TA18-331A: 3ve – Major Online Ad Fraud Operation
Original release date: November 27, 2018
Systems Affected
Microsoft Windows
Overview
This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland...