Axis Cyber Labs

04/04/2022

Security researchers are urging users of Spring — a popular framework for creating create web applications in the widely used Java programming language — to update their software due to a critical vulnerability discovered this week.

An alert Friday from the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency warns Spring users that a remote attacker “could exploit this vulnerability to take control of an affected system,” otherwise known as remote code ex*****on (RCE).

03/30/2022

While the threat of a massive cyberattack wiping out Ukrainian infrastructure looms, network operators on the ground are dealing with a much more old-fashioned form of the devastations of war.

https://www.cyberscoop.com/ukraine-internet-starlink-security/

Donations of modems, routers and other equipment are flooding in from around the world.

03/28/2022

Criticism of the identity authentication company Okta intensified Thursday in the wake of the company’s announcement that 366 customer accounts were potentially compromised in a security breach via an attack on a third-party contractor’s laptop.

https://www.cyberscoop.com/okta-security-breach-falllout/

Security experts questioned how long it took Okta to disclose the Lapsus$ breach and worried about a domino effect.

03/28/2022

Along with many other industries, the healthcare industry is rapidly changing and the technology that is used continues to improve. More advanced technology means more connections to the internet, resulting in increased attack surface for hackers and cyberattacks.

https://www.axiscyberlabs.com/2022/02/02/why-has-healthcare-become-a-major-ransomware-target/

The rise in ransomware attacks on the healthcare industry this year begs the question: “Why healthcare?” Learn more about why healthcare companies are at risk.

03/02/2022

An infamous ransomware group with potential ties to Russian intelligence and known for attacking health care providers and hundreds of other targets posted a warning Friday saying it was “officially announcing a full support of Russian government.”

https://conta.cc/3hk82Ss

The Conti ransomware gang vowed to attack Russia's enemies, but it walked back some of its original statement later.

02/28/2022

The operators of TrickBot have essentially shut down the notorious malware, multiple reports say, but evidence suggests the gang has begun using other platforms or folded operations into another cybercrime group altogether.
https://www.cyberscoop.com/trickbot-shutdown-conti-emotet/

The operators of TrickBot have essentially shut down the notorious malware, multiple reports say, but evidence suggests the gang has begun using other platforms or folded operations into another cybercrime group altogether. Researchers at Intel471 and AdvIntel noted a sharp dip in recent TrickBot ac...

11/23/2021

U.S., U.K. and Australian cyber agencies on Wednesday accused Iranian government-sponsored hacking groups of exploiting Microsoft and Fortinet vulnerabilities this year in a bid to deploy ransomware against critical infrastructure.

U.S., U.K. and Australian cyber agencies on Wednesday accused Iranian government-sponsored hacking groups of exploiting Microsoft and Fortinet vulnerabilities this year in a bid to deploy ransomware against critical infrastructure. The hackers are interested in taking advantage of known software fla...

11/22/2021

Banks must report major cybersecurity incidents to federal officials within 36 hours under a rule that U.S. financial regulators finalized on Thursday.

This is a 403 error, and it's not as ominous as it sounds. Bitly can only show this page to people who have permission to see it. Maybe what you are looking for can be found at Bitly.com.

11/10/2021

If you are a business owner, then you know the importance of staying organized. Whether it be physical assets such as paperwork and office supplies, or digital assets such as communications and financial records, you need to have things organized to find the most success. The same philosophy should be applied to your network applications, and this is where having a network map comes in handy.

What is the Importance of Network Maps for Businesses Online? If you are a business owner, then you know the importance of staying organized. Whether it be physical assets such as paperwork and office supplies, or digital assets such as communications and financial records, you need to have things o...

11/08/2021

Phishing is the top cybersecurity risk for organizations today.

As we store more of our information online, the more at risk that information is. Unfortunately, cyberattacks can happen to any business of any size. Attackers can target your employees via email, text message, luring them onto malicious fake websites. Counterfeit websites play a big role in phishing exploits. They work because they imitate trusted companies to instill confidence in potential victims.

https://www.axiscyberlabs.com/2021/10/25/how-can-cybersecurity-awareness-and-training-help-to-prevent-phishing-attacks/

How Cybersecurity Awareness Can Help Prevent Phishing Attacks Phishing is the top cybersecurity risk for organizations today. As we store more of our information online, the more at risk that information is. Unfortunately, cyberattacks can happen to any business of any size. Attackers can target you...

09/17/2021

WhatsApp will add a feature that allows users to turn on end-t0-end encryption for messages they back up to cloud providers, the Facebook-owned company announced Friday.

This is a 403 error, and it's not as ominous as it sounds. Bitly can only show this page to people who have permission to see it. Maybe what you are looking for can be found at Bitly.com.

09/15/2021

U.S. law enforcement officials gathered details about a suspected cybercriminal by collecting intelligence from his apparent messages to v**e shops in Ukraine. The accused scammer, Glib Oleksandr Ivanov-Tolpintsev, was arraigned Tuesday during an 11-minute hearing in which he appeared virtually from the Pinellas County Jail near Tampa, Fla.

U.S. law enforcement officials gathered details about a suspected cybercriminal by collecting intelligence from his apparent messages to v**e shops in Ukraine. The accused scammer, Glib Oleksandr Ivanov-Tolpintsev, was arraigned Tuesday during an 11-minute hearing in which he appeared virtually from...