26
2
China-linked FamousSparrow APT group resurfaces with enhanced capabilities - Help Net Security
(www.helpnetsecurity.com)
Cybersecurity
6872 readers
56 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]
Notable mention to [email protected]
founded 2 years ago
MODERATORS
27
28
29
1
Inside Kimsuky’s Latest Cyberattack: Analyzing Malicious Scripts and Payloads
(labs.k7computing.com)
30
31
32
33
34
35
4
New SvcStealer Malware Attacking Users To Steal Sensitive Data From Browsers & Apps
(cybersecuritynews.com)
36
37
38
11
Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools
(securityaffairs.com)
39
40
6
Hidden Threats: How Microsoft 365 Backups Store Risks for Future Attacks
(www.bleepingcomputer.com)
41
I learned of the existence of steampipe recently, which seems to be an interesting tool to help teams - including cybersecurity teams - understand their cloud assets and ensure compliance with security policies.
I started playing around with it, and one thing that struck me immediately is the need to store API credentials for the various plugins in plaintext in JSON files in your user profile. This struck me as incredibly insecure, especially given that the default UNIX permissions on the files seem to be 644.
Does anyone know if there is a way to store and dynamically retrieve these API credentials more securely, such as in a remote key store like AWS Secrets Manager or Azure Key Vault? I spent awhile searching and watching some YouTube videos, but didn't come across a method to do this.
42
43
44
45
46
47
2
Cybercriminals Exploit CheckPoint Driver Flaws in Malicious Campaign
(www.infosecurity-magazine.com)
48
49
50