Simon Ulmer’s Post

🔔 NEW BLOG ALERT! 🔔 Our newest blog, by David Cottingham  discusses the increasing trend of attackers using “living off the land” binaries (LOLBins) to bypass traditional malware defenses by exploiting native operating system utilities. It suggests that organizations can reduce their attack surface by monitoring, restricting, and blocking unused OS features and specific binaries, with tools like Endpoint Detection and Response (EDR) and application allowlisting solutions, such as those offered by Airlock Digital, to minimize the threat posed by LOLBin misuse. Click here to access the blog: https://lnkd.in/gYHcr9A2

Interesting article, Breakout time (a new metric of hacker sophistication from initial intrusion to privileged control) for state-sponsored hackers is about 19 minutes, so how much quickly we need to act as a defender to detect and eject such intrusion.

🤔👨💻Who are the biggest cyberattackers? Our data shows cybercriminals are responsible for over 60% of attacks! 📈With this sudden spike in cybercriminals impacting #OT with their cyber-attacks came several questions. Learn more in our #Cy-Xplorer report! https://lnkd.in/eBHG_5WM #CyXplorer

How much has changed in cyber security since 1992? The what, how, where, when and why has definitely evolved. But the cavalier approach some businesses take hasn't. "...but it's never happened me." "...but a business my size wouldn't be targeted." "...but we've installed anti-virus so we're ok." Want to make sure your business is protected? DM me and we'll take a look. Want a flashback to 1992? Check this out! https://lnkd.in/evaj8kAr

Malware-as-a-service (MaaS) Lumma Stealer is commonly used by threat actors to steal sensitive information like passwords and crypto-wallet data, researchers at Qualys, who recently detailed the latest attack chain, explained. "When the user clicks the 'I'm not a robot' button, verification steps are presented," Qualys threat researcher Vishwajeet Kumar wrote in a blog post detailing the latest Lumma Stealer find. "Completing these steps triggers the execution of a PowerShell command that initiates the download of an initial stager (malware downloader) on the target machine."

🤔👨💻Who are the biggest cyberattackers? Our data shows cybercriminals are responsible for over 60% of attacks! 📈With this sudden spike in cybercriminals impacting #OT with their cyber-attacks came several questions. Learn more in our #Cy-Xplorer report! 👉📙Download your copy: https://lnkd.in/d5wz8Bnk #CyXplorer

#Rootkits are becoming the weapon of choice of #nationstate-supported #threat actors looking to stay under the radar of security detection solutions and persist undetected in systems. Techopedia, with the help of industry experts, tackles the new and increasingly growing trend of rootkits — it is a slight David vs. Goliath battle against actors with almost unlimited resources. Here are six critical steps to fighting back, with particular attention on how to detect and shut down #rootkitattacks.

🤔👨💻Who are the biggest cyberattackers? Our data shows cybercriminals are responsible for over 60% of attacks! 📈With this sudden spike in cybercriminals impacting #OT with their cyber-attacks came several questions. Learn more in our #CyXplorer report! Orange Cyberdefense 👉📙Download your copy: https://lnkd.in/dyZJXYkZ

China Possibly Hacking US “Lawful Access” Backdoorhttps://lnkd.in/gue4anba, Possibly, Hacking, “Lawful, Access”, Backdoor

2023 saw a surge in cybercrime against the maritime industry. Unfortunately, 2024 is looking even darker. But where do the threats come from? And should you worry about your fleet and operations? Here are a few thoughts on the months ahead.