Skip to main content
To Customer Support To Customer Support

Cybersecurity Standpoint

Experts share their insights on protecting against cyber threats and staying ahead of evolving security risks.

  • 12 Topics
  • 164 Replies
Takedown

LockBit Saga Continues: Return of the FBI

  • 7
  • 4
Blog

Understanding Brute Force Attacks: The Persistent Threat in Cybersecuri...

  • 4
  • 4
Blog

Tax Season Alert: Common scams and cracked software

  • 4
  • 5
12 Topics
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
Understanding Brute Force Attacks: The Persistent Threat in CybersecurityBlog

Brute force attacks stand as a testament to the idea that persistence often pays off - unfortunately, in this context, it’s for  bad actors. This blog dives into the mechanics of brute force attacks, unraveling their methodology and focusing on their application. Whether its Remote Desktop Protocol (RDP), or direct finance theft, brute force attacks are a prime tactic in the current cybersecurity landscape. What is a Brute Force Attack?A brute force attack is a cyber attack method where an attacker attempts to gain unauthorized access to a system or data by systematically trying every possible combination of passwords or keys. This method relies on the sheer power of repetition and the computational capacity to try thousands, if not millions, of combinations in a short span of time. Think of it as trying every key on a keyring until finding the one that unlocks a door.Types of Brute Force AttacksSimple brute force attacks: This basic approach involves trying all possible combinations o

874
L
New Member
2 months ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
AI's Challenge to Biometric Security: Implications of new iOS malware GoldPickaxeBlog

In today's digital age, Artificial Intelligence (AI) is advancing at an astonishing pace, posing new challenges to the integrity of biometric security. The advent of AI-driven tools, capable of crafting deepfakes, exposes a significant flaw in biometric authentication systems: unlike passwords, biometric identifiers cannot simply be reset once they are compromised.The emergence of the "GoldPickaxe" malware, attributed to a group fluent in Chinese, serves as a vivid illustration of AI's potential to circumvent biometric protections. By deceiving individuals into submitting facial scans under the pretense of a legitimate service, the perpetrators utilize deepfake technology to gain unauthorized access to the victims' financial accounts. This scenario underscores the urgent need for industries, particularly banking, to rapidly adjust to these evolving cybersecurity threats. For a detailed technical analysis and to learn more about the indicators of compromise associated with GoldPickaxe,

863
M
New Member
3 months ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
LockBit Saga Continues: Return of the FBITakedown

In the latest chapter of the ongoing LockBit saga, international law enforcement agencies have struck back once again, seizing the group's infrastructure and identifying the key figure behind the infamous ransomware operation. This second takedown, building on previous efforts, further demonstrates the determination of global partners to disrupt the cybercriminal network's activities. Newly seized leaksite on the darkwebSee the previous events on this epic feud between LockBit and Law Enfocement  The New Takedown: Exposing the Leader  Identity Revealed: Dmitry Yuryevich Khoroshev Unmasked Following a thorough investigation, authorities have unsealed an indictment revealing the mastermind behind LockBit: Dmitry Yuryevich Khoroshev, known by aliases like "LockBitSupp" and "putinkrab." This Russian national has been charged with multiple counts of fraud, extortion, and intentional damage to protected computers. Renewed Sanctions and Rewards The U.S. Department of the Treasury has imposed

2154
russell.harris
Popular Voice
6 months ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
LockBit Ransomware Strikes Back: A Resilient Threat Amidst Law Enforcement EffortsBlog

Stream the Webinar on demand HEREIn a dramatic sequence of events, the LockBit ransomware group, known for its #1 spot in ransomware, has showcased a remarkable capacity for resilience and adaptability, despite significant law enforcement actions aimed at dismantling its operations. Recent developments reveal LockBit's prowess, the challenges of combating cybercrime, and the evolving landscape of cybersecurity threats. See our previous post on the takedown of LockBit​​​  The FBI's takedown of LockBit came at a critical moment as the group was preparing to release sensitive data stolen from Fulton County, Georgia's government computer systems. This data, allegedly including documents tied to high-profile legal matters, including president Donald Trump and potentially jeopardizing numerous trials. This action underscores the grave risks associated with ransomware attacks and their impact to politics. Despite LockBit's initial setback, the group's vow to regroup and its threats to release

4437
M
New Member
6 months ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
Tax Season Alert: Common scams and cracked softwareBlog

OpenText is committed to providing you with the latest intelligence and tips to safeguard your digital life, especially during high-risk periods like tax season. Our threat analysts are constantly monitor the ebb and flow of various threats. One trend that has recently caught our attention is the notable spike in malware-infected cracked software, particularly as we enter tax season. This post aims to shed light on the dangers of using cracked software, share best practices for a secure tax season, and highlight our latest intelligence on the surge in cracked tax software threats. The Hidden Cost of Cracked Software Cracked software, often touted as a cost-free way to access games and expensive software, carries a significant risk far beyond legal and ethical concerns. These unauthorized versions are frequently loaded with malware, from trojans and keyloggers to ransomware. The allure of free access blinds users to the dangers, turning their devices into gateways for cybercriminals to

3455
TylerM
Administrator
8 months ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
LockBit Takedown: A Landmark Cybersecurity TriumphTakedown

  In a groundbreaking operation that marks a pivotal moment in the fight against cybercrime, U.S. and U.K. law enforcement agencies, alongside international partners, have delivered a significant blow to the LockBit ransomware group. This collaborative effort not only disrupted one of the most notorious ransomware operations globally but also highlighted the resilience and determination of global cybersecurity communities against cyber threats. To see the updated countermeasures that LockBit took in retaliation see this post​​​​​​  A Global Threat NeutralizedLockBit, known for its widespread impact, has victimized over 2,000 entities worldwide, amassing over $120 million in ransom payments through demands that reached into the hundreds of millions and damages that caused billions. Its attacks spanned across various sectors, including manufacturing, logistics, insurance, and more, showcasing its indiscriminate approach to cyber extortion. Lockbit were the most successful ransomware the

1852
ProTruckDriver
Moderator
8 months ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
Navigating the Web of Romance Scams: A Guide for Businesses and ConsumersBlog

In the digital age, the quest for love has moved online, but so have the fraudsters, with romance scams reaching record highs. These scams don't just harm individuals financially and emotionally; they can also pose significant risks to businesses. Let's explore how these scams work, their impact, and how both businesses and consumers can protect themselves. Understanding Romance ScamsRomance scams involve fraudsters creating fake profiles on dating sites, social media platforms, or apps to establish relationships with victims, gain their trust, and eventually, scam them out of money. In 2022, nearly 70,000 people reported such scams, with losses totaling a staggering $1.3 billion. The median loss per victim was around $4,400, highlighting the severe impact on individuals​​. Key Trends to WatchThe reported losses to romance scams were up nearly 80% year over year, showing a rapid increase in both the frequency and effectiveness of these scams​​. This trend underscores the evolving threa

613
russell.harris
Popular Voice
9 months ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
Log4j Aftermath: Lessons Learned and Steps Forward for the Community and IndustryBlog

In the wake of the Log4j vulnerability—arguably one of the most significant security breaches of recent years—the tech world is left grappling with its aftermath. Known as Log4Shell, the Log4j vulnerability had a profound impact due to its ubiquity in enterprise software worldwide. The crux of the issue was its exploitation allowing remote code execution, and with the widespread use of Log4j in various systems, this presented an almost unprecedented level of risk. Now, as the dust settles, it's vital to take a step back and consider what we can learn from this incident and what needs to be done by the community and industry moving forward. The Log4j vulnerability is a stark reminder of the extent of potential security threats in open-source software. The sheer scale of applications and systems using Log4j was immense, and it highlighted how deeply integrated and dependent our technology ecosystem is on such components. Therefore, the first step is acknowledging the scale of potential i

1094
Z
New Member
1 year ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
IoT in the Cybersecurity Landscape: Convenience vs SecurityBlog

The Internet of Things (IoT) has revolutionized how we interact with our surroundings, making life more convenient and efficient. IoT devices connect everyday objects to the internet, allowing us to control our homes, monitor our health, and even track our belongings. However, this interconnectivity comes at a cost: the exponential growth of IoT devices has led to increased cybersecurity risks. In this article, we will discuss trends in IoT and their implications on the cybersecurity landscape, and ponder whether the convenience provided by IoT is worth the security trade-offs. The concept of IoT can be traced back to the 1980s, but it wasn't until the early 2000s that IoT devices began to gain widespread adoption. In the early days of IoT, security was often an afterthought and the focus was on getting a working product out the door. However, as IoT devices have proliferated, the risks associated with their widespread use have become more apparent.I was at a Defcon event about a decad

61957
Z
New Member
1 year ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Cybersecurity Standpoint
Artificial intelligence and machine learning in cybersecurityBlog

Artificial intelligence (AI) and machine learning (ML) are going to revolutionize the field of cybersecurity. These technologies can be used to improve the detection and prevention of cyber threats, making it easier for organizations to protect their networks and data. However, as with any new technology, there are also potential risks and challenges that must be considered.One of the biggest benefits of AI and ML in cybersecurity is their ability to automatically detect and respond to cyber threats. These technologies can be used to analyze large amounts of data, such as network traffic logs and characteristics of files to identify patterns and anomalies that may indicate a cyber attack or malicious nature. They can also be used to automatically respond to threats, such as by shutting down a compromised system or blocking a malicious IP address. Additionally, the benefits of AI and ML in cybersecurity is their ability to improve the efficiency and effectiveness of incident response. T

56218
TylerM
Administrator
1 year ago
K
khumphreyRetired Webrooter
published in Cybersecurity Standpoint
Data Privacy Week 2023Blog

Welcome to Data Privacy Week! This is an annual campaign with the purpose of spreading awareness about online privacy and educating citizens on how to manage their personal information and keep it secure. Today we will discuss the importance of using cold storage password managers as well as the impact of the General Data Protection Regulation (GDPR) on data privacy. Get ready to learn about personal data security, creating and storing strong passwords as well as the negative side-effects of rising GDPR fines. Password Manager Data Breaches At the end of 2022, Norton LifeLock suffered a data breach. Symantec reports that their systems were not directly compromised - it seems as though the attackers used a technique called credential stuffing to try out user credentials for the service in bulk. It is likely that the attacker bought a large amount of stolen user credentials on the Dark Web. By attempting logins with that massive list of credentials, the attacker was successful in comprom

41223
mmaner
New Voice
1 year ago
K
khumphreyRetired Webrooter
published in Cybersecurity Standpoint
Zero Trust: Hype vs. RealityBlog

Zero Trust is a security approach that has gained significant attention in the cybersecurity world in recent years. But what is Zero Trust, and how effective is it in protecting against cyber threats? Cybersecurity professionals are rightfully skeptical of phrases that suddenly become buzzwords overnight. However, there are many legitimate technologies and policies that fall under the umbrella term “Zero Trust”. In this post, we will explore the concepts and technologies involved in Zero Trust and attempt to differentiate marketing hype from factual evidence. DefinitionFirst, let’s define zero trust. At its core, Zero Trust is a security model that assumes all users and devices within a network are untrusted and potentially malicious. This means that, rather than relying on the traditional perimeter-based security model which assumes that everything inside the network is trusted, a Zero Trust approach treats all access requests as coming from an untrusted source. There are a few other

70534
C
New Member
1 year ago

Badges

Show all badges

Join the Conversation

Terms & Conditions