Russian FSB Hackers Breach Pakistan's APT Storm-0156

Parasitic advanced persistent threat Secret Blizzard accesses another APT's infrastructure and steals what it has stolen from South Asian government and military targets

Follow Dark Reading:

December 05, 2024

LATEST SECURITY NEWS & COMMENTARY Russian FSB Hackers Breach Pakistan's APT Storm-0156 Parasitic advanced persistent threat Secret Blizzard accesses another APT's infrastructure and steals what it has stolen from South Asian government and military targets. Pegasus Spyware Infections Proliferate Across iOS, Android Devices The notorious spyware from Israel's NSO Group has been found targeting journalists, government officials, and corporate executives in multiple variants discovered in a threat scan of 3,500 mobile phones. CISA Issues Guidance to Telecom Sector on Salt Typhoon Threat Individuals concerned about the privacy of their communications should consider using encrypted messaging apps and encrypted voice communications, CISA and FBI officials say. Veeam Urges Updates After Discovering Critical Vulnerability The vulnerability affects certain versions of the Veeam Service Provider Console that can only be fixed by updating with the latest patch. Navigating the Changing Landscape of Cybersecurity Regulations The evolving regulatory environment presents both challenges and opportunities for businesses. (Sponsored Article) Avoiding 7 Frequent SecOps Mistakes Learn the most common security operations (SecOps) traps and the best practices for avoiding them. MORE NEWS / MORE COMMENTARY HOT TOPICS Note From the Editor-in-Chief A change in ownership and what it means for our readers. Venom Spider Spins Web of New Malware for MaaS Platform A novel backdoor malware and a loader that customizes payload names for each victim have been added to the threat group's cybercriminal tool set. Ransomware's Grip on Healthcare Until C-level executives fully understand potential threats and implement effective mitigation strategies, healthcare organizations will remain vulnerable and at risk of disruption. Incident Response Playbooks: Are You Prepared? The playbooks that accompany your incident response plan provide efficiency and consistency in responses, help reduce downtime and dwell time, and can be a cost-saving and reputational-saving measure for your organization. MORE PRODUCTS & RELEASES Onapsis Expands Code Security Capabilities to Accelerate and De-Risk SAP BTP Development Projects Wyden and Schmitt Call for Investigation of Pentagon's Phone Systems KnowBe4 Releases the Latest Phishing Trends in Q3 2024 Phishing Report BigID Releases Data Activity Monitoring to Extend DDR, Detect Malicious Actors, and Strengthen Data Security Posture MORE PRODUCTS & RELEASES EDITORS' CHOICE Decade-Old Cisco Vulnerability Under Active Exploit Cisco encourages users to update to an unaffected version of its Adaptive Security Appliance (ASA) software since there are no workarounds for the 2014 vulnerability. LATEST FROM THE EDGE Digital Certificates With Shorter Lifespans Reduce Security Vulnerabilities Proposals from Google and Apple drastically reduce the life cycle of certificates, which should mean more oversight — and hopefully better control. LATEST FROM DR TECHNOLOGY SecureG, CTIA Project Secures Business Phone Calls BCID mitigates the risk of consumers being harmed by fraud and bad actors by vetting to deliver a trusted, branded call experience for consumers. LATEST FROM DR GLOBAL African Law Enforcement Nabs 1,000+ Cybercrime Suspects Authorities across 19 African countries also dismantled their infrastructure and networks, thanks to cooperation between global law enforcement and private firms. WEBINARS The Unreasonable Effectiveness of Inside Out Attack Surface Management 10 Emerging Vulnerabilities Every Enterprise Should Know View More Dark Reading Webinars >> WHITE PAPERS Enterprise Key Management Buyer's Guide The Future of Cybersecurity is Passwordless and Keyless The Definitive Guide to Container Security Frost Radar: Cloud Security Posture Management, 2024 6 Key Requirements of Multicloud Security The State of Vulnerability Management in the Enterprise 5 Essential Insights into Generative AI for Security Leaders View More White Papers >> FEATURED REPORTS Managing Third-Party Risk Through Situational Awareness 2024 InformationWeek US IT Salary Report View More Dark Reading Reports >>

Dark Reading Daily -- Published By Dark Reading Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA To opt-out of any future Dark Reading Daily Newsletter emails, please respond here. Thoughts about this newsletter? Give us feedback. Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our Privacy Statement.

© 2024 | Informa Tech | Privacy Statement | Terms & Conditions | Contact Us