Author: Robert Timlick

  • French Authorities Launch Operation to Remove PlugX Malware from Infected Systems

    French Authorities Launch Operation to Remove PlugX Malware from Infected Systems

    French judicial authorities, in collaboration with Europol, have launched a so-called “disinfection operation” to rid compromised hosts of a known malware called PlugX.
    The Paris Prosecutor’s Office, Parquet de Paris, said the initiative was launched on July 18 and that it’s expected to continue for “several months.”
    It further said around a hundred victims located in France, Malta, Portugal,
  • Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

    Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

    Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that targets Apple macOS systems with the goal of stealing users’ Google Cloud credentials from a narrow pool of victims.
    The package, named “lr-utils-lib,” attracted a total of 59 downloads before it was taken down. It was uploaded to the registry in early June 2024.
    “The malware uses a
  • This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

    This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

    A Spanish-speaking cybercrime group named GXC Team has been observed bundling phishing kits with malicious Android applications, taking malware-as-a-service (MaaS) offerings to the next level.
    Singaporean cybersecurity company Group-IB, which has been tracking the e-crime actor since January 2023, described the crimeware solution as a “sophisticated AI-powered phishing-as-a-service platform”
  • Offensive AI: The Sine Qua Non of Cybersecurity

    Offensive AI: The Sine Qua Non of Cybersecurity

    “Peace is the virtue of civilization. War is its crime. Yet it is often in the furnace of war that the sharpest tools of peace are forged.” – Victor Hugo.
    In 1971, an unsettling message started appearing on several computers that comprised ARPANET, the precursor to what we now know as the Internet. The message, which read “I’m the Creeper: catch me if you can.” was the output of a program named
  • U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals

    U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals

    The U.S. Department of Justice (DoJ) on Thursday unsealed an indictment against a North Korean military intelligence operative for allegedly carrying out ransomware attacks against healthcare facilities in the country and funneling the payments to orchestrate additional intrusions into defense, technology, and government entities across the world.
    “Rim Jong Hyok and his co-conspirators deployed
  • Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining

    Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining

    Cybersecurity researchers are sounding the alarm over an ongoing campaign that’s leveraging internet-exposed Selenium Grid services for illicit cryptocurrency mining.
    Cloud security firm Wiz is tracking the activity under the name SeleniumGreed. The campaign, which is targeting older versions of Selenium (3.141.59 and prior), is believed to be underway since at least April 2023.
    “Unbeknownst to
  • CrowdStrike Warns of New Phishing Scam Targeting German Customers

    CrowdStrike Warns of New Phishing Scam Targeting German Customers

    CrowdStrike is alerting about an unfamiliar threat actor attempting to capitalize on the Falcon Sensor update fiasco to distribute dubious installers targeting German customers as part of a highly targeted campaign.
    The cybersecurity company said it identified what it described as an unattributed spear-phishing attempt on July 24, 2024, distributing an inauthentic CrowdStrike Crash Reporter
  • Recount in Wasco County District Attorney race shows no change

    Recount in Wasco County District Attorney race shows no change

    WASCO CO. — Wasco County Clerk’s Office concluded the demand recount of the district attorney race late in the afternoon on July 21, reported Lisa Gambee, Wasco County clerk, via email.
  • North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

    North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

    A North Korea-linked threat actor known for its cyber espionage operations has gradually expanded into financially-motivated attacks that involve the deployment of ransomware, setting it apart from other nation-state hacking groups linked to the country.
    Google-owned Mandiant is tracking the activity cluster under a new moniker APT45, which overlaps with names such as Andariel, Nickel Hyatt,
  • A Simple Guide to the Updated NIST 2.0 Cybersecurity Framework

    A Simple Guide to the Updated NIST 2.0 Cybersecurity Framework

    Staying ahead of threats is a challenge for organizations of all sizes. Reported global security incidents grew between February and March of 2024. They increased by 69.8%. It’s important to use a structured approach to cybersecurity. This helps to protect your organization.

    The National Institute of Standards and Technology (NIST) created a Cybersecurity Framework (CSF). It provides an industry-agnostic approach to security. It’s designed to help companies manage and reduce their cybersecurity risks. The framework was recently updated in 2024 to NIST CSF 2.0.

    CSF 2.0 is a comprehensive update that builds upon the success of its predecessor. It offers a more streamlined and flexible approach to cybersecurity. This guide aims to simplify the framework. As well as make it more easily accessible to small and large businesses alike.

    Understanding the Core of NIST CSF 2.0


    At the heart of CSF 2.0 is the Core. The Core consists of five concurrent and continuous Functions. These are: Identify, Protect, Detect, Respond, and Recover. These Functions provide a high-level strategic view of cybersecurity risk, as well as an organization’s management of that risk. This allows for a dynamic approach to addressing threats.

    Here are the five Core Functions of NIST CSF 2.0:

    1. Identify
      This function involves identifying and understanding the organization’s assets, cyber risks, and vulnerabilities. It’s essential to have a clear understanding of
      what you need to protect. You need this before you can install safeguards.
    2. Protect
      The protect function focuses on implementing safeguards. These protections are to deter, detect, and mitigate cybersecurity risks. This includes measures such as firewalls, intrusion detection systems, and data encryption.
    3. Detect
      Early detection of cybersecurity incidents is critical for minimizing damage. The detect function emphasizes the importance of detection, as well as having mechanisms to identify and report suspicious activity.
    4. Recover
      The recover function focuses on restoring normal operations after a cybersecurity incident. This includes activities such as data restoration, system recovery, and
      business continuity planning.
    5. Respond
      The respond function outlines the steps to take in the event of a cybersecurity incident. This includes activities such as containment, eradication, recovery, and
      lessons learned.
    6. Recover
      The recover function focuses on restoring normal operations after a cybersecurity incident. This includes activities such as data restoration, system recovery, and
      business continuity planning.

    Profiles and Tiers: Tailoring the Framework

    The updated framework introduces the concept of Profiles and Tiers. These help organizations tailor their cybersecurity practices. They can customize them to their specific needs, risk tolerances, and resources.

    Profiles

    Profiles are the alignment of the Functions, Categories, and Subcategories. They’re aligned with the business requirements, risk tolerance, and resources of
    the organization.

    Tiers

    Tiers provide context on how an organization views cybersecurity risk as well as the processes in place to manage that risk. They range from Partial (Tier 1) to
    Adaptive (Tier 4).

    Benefits of Using NIST CSF 2.0

    There are many benefits to using NIST CSF 2.0, including:

    • Improved Cybersecurity Posture: By following the guidance in NIST CSF 2.0, organizations can develop a more comprehensive and effective cybersecurity program.
    • Reduced Risk of Cyberattacks: The framework helps organizations identify and mitigate cybersecurity risks. This can help to reduce the likelihood of cyberattacks.
    • Enhanced Compliance: NIST aligned CSF 2.0 with many industry standards and regulations. This can help organizations to meet compliance requirements.
    • Improved Communication: The framework provides a common language for communicating about cybersecurity risks. This can help to improve communication between different parts of an organization.
    • Cost Savings: NIST CSF 2.0 can help organizations save money. It does this by preventing cyberattacks and reducing the impact of incidents.

    Getting Started with NIST CSF 2.0

    If you are interested in getting started with NIST CSF 2.0, there are a few things you can do:

    • Familiarize yourself with the framework: Take some time to read through the NIST CSF 2.0 publication. Familiarize yourself with the Core Functions and categories.
    • Assess your current cybersecurity posture: Conduct an assessment of your current cybersecurity posture. This will help you identify any gaps or weaknesses.
    • Develop a cybersecurity plan: Based on your assessment, develop a cybersecurity plan. It should outline how you will put in place the NIST CSF 2.0 framework in your organization.
    • Seek professional help: Need help getting started with NIST CSF 2.0? Seek out a managed IT services partner. We’ll offer guidance and support.

    By following these steps, you can begin to deploy NIST CSF 2.0 in your organization. At the same time, you’ll be improving your cybersecurity posture.

    Schedule a Cybersecurity Assessment Today

    The NIST CSF 2.0 is a valuable tool. It can help organizations of all sizes manage and reduce their cybersecurity risks. Follow the guidance in the framework. It will help you develop a more comprehensive and effective cybersecurity program.

    Are you looking to improve your organization’s cybersecurity posture? NIST CSF 2.0 is a great place to start. We can help you get started with a cybersecurity assessment. We’ll identify assets that need protecting and security risks in your network. We can then work with you on a budget-friendly plan. Contact us today to schedule a cybersecurity assessment.

    —

    Featured Image Credit

    This Article has been Republished with Permission from .