Threat actor reportedly selling FortiGate exploit tool on darkweb that targets FortiOS.
Posted inCybersecurity News

Threat actor reportedly selling FortiGate exploit tool on darkweb that targets FortiOS.

Cybersecurity circles have been focused on a new threat actor claim regarding a zero-day exploit targeting Fortinet FortiGate firewalls. This claim emerged on a prominent dark web forum and has raised significant alarm due to the exploit’s purported capabilities and the critical role FortiGate devices play in enterprise network security.
Authorities battle Violence-as-a-Service (Vaas), a disturbing model in which organize crime groups recruit teenagers as hitmen.
Posted inCybersecurity News

Authorities battle Violence-as-a-Service (Vaas), a disturbing model in which organize crime groups recruit teenagers as hitmen.

European police, led by Denmark and Sweden, are intensifying efforts to dismantle a disturbing new criminal model known as “violence-as-a-service” (VaaS), in which organized crime groups recruit teenagers online to carry out contract killings. This crackdown is a response to a surge in cross-border violence facilitated by encrypted apps and social media platforms, which allow gangs to outsource violent crimes—including shootings and assassinations—to young people, some as young as 14.
New report addresses growing threat of DDoS attacks against the financial sector.
Posted inCybersecurity News

New report addresses growing threat of DDoS attacks against the financial sector.

A new joint report by FS-ISAC and Akamai, titled From Nuisance to Strategic Threat: DDoS Attacks Against the Financial Sector, highlights a sharp escalation in both the frequency and sophistication of distributed denial-of-service (DDoS) attacks targeting the global financial sector. The findings underscore a strategic shift in cybercriminal tactics, with significant consequences for financial institutions, their customers, and the broader economy.
Oracle databases, TNS, and how to hack it.
Posted inScanning and Analysis

Oracle databases, TNS, and how to hack it.

The Oracle Transparent Network Substrate (TNS) server is a communication protocol that enables communication between Oracle databases and applications across networks. Initially introduced as part of the Oracle Net Services software suite, TNS supports diverse networking protocols, including IPX/SPX and TCP/IP protocol stacks, facilitating communication between Oracle databases and client applications. Its built-in encryption mechanism ensures the security of data transmitted. Over time, TNS has undergone updates to support newer technologies, including IPv6 and SSL/TLS encryption.
DARPA issues call to private sector, urging partners to assist in strengthening DoD’s cybersecurity.
Posted inCybersecurity News

DARPA issues call to private sector, urging partners to assist in strengthening DoD’s cybersecurity.

Defense Advanced Research Projects Agency (DARPA) has issued a significant call to the private sector, urging industry partners to assist in improving and strengthening cybersecurity for the Department of Defense (DoD). This initiative is part of a broader strategy to address escalating cyber threats targeting U.S. military and critical infrastructure systems.
Qilin ransomware-as-a-service (RaaS) adds a “call an attorney” feature to pressure victims to pay.
Posted inCybersecurity News

Qilin ransomware-as-a-service (RaaS) adds a “call an attorney” feature to pressure victims to pay.

The threat actors behind the Qilin ransomware-as-a-service (RaaS) scheme have recently introduced a “Call Lawyer” feature, offering legal counsel to their affiliates as a means to increase pressure on victims during ransom negotiations. This development is part of a broader strategy to make Qilin stand out in the cybercrime marketplace by providing a full suite of services to affiliates, including legal assistance, negotiation support, data storage, DDoS capabilities, and even media support.
How to hijack a television broadcast signal.
Posted inExploitation

How to hijack a television broadcast signal.

Broadcast signal hijacking—also known as broadcast signal intrusion—is the unauthorized takeover of television (or radio) signals, allowing attackers to inject their own content into a broadcast. Over the years, several methods have been used to achieve this, ranging from physical tampering to sophisticated cyberattacks.