NCC Group’s Post

Calling all PUBLIC SECTOR security folks! RaaS is on the rise and targeting the public sector more than ever before. Stay up to date on threat actor groups targeting infrastructures throughout the U.S. and learn how Secureworks sees more, detects better, and responds faster to threats. Our first episode unpacks the intricate tactics, techniques, and procedures of today's cyber adversaries. The Secureworks Counter Threat Unit (CTU) researchers have meticulously analyzed these insights to share with you. Register here:

Very interesting techniques in use here. XM Cyber identifies these risks at scale and identifies how the attacker can use them to reach critical assets. https://lnkd.in/girdx5AK

Very interesting techniques in use here. XM Cyber identifies these risks at scale and identifies how the attacker can use them to reach critical assets. https://lnkd.in/girdx5AK

Prominent Cyber Threat Actors and Their Goals: Prominent Cyber Threat Actors and Their Goals The dynamic realm of cyber defense is perpetually challenged by sophisticated and well-organized cyber threat actors. These entities, often shrouded in secrecy and wielding advanced technological prowess, embark on missions spanning monetary enrichment to pursue ideological causes. We examine the foremost cyber threat collectives and their goals: Lazarus […] #VancouverITConsultingNewsInformation

Prominent Cyber Threat Actors and Their Goals: Prominent Cyber Threat Actors and Their Goals The dynamic realm of cyber defense is perpetually challenged by sophisticated and well-organized cyber threat actors. These entities, often shrouded in secrecy and wielding advanced technological prowess, embark on missions spanning monetary enrichment to pursue ideological causes. We examine the foremost cyber threat collectives and their goals: Lazarus […] #VeltecNetworksTechnologyInsights

📰 HOT NEWS: DHS Science and Technology Directorate, Cybersecurity and Infrastructure Security Agency, and Pacific Northwest National Laboratory have partnered together to design and implement a cutting-edge tool that will help boost the cyber strength of our nation’s harbors! The Control Environment Laboratory Resource (CELR), a laboratory-sized seaport platform, allows operators to safely experience the effects of a cyberattack and hone their threat hunting and cyber-defense skills. Check out the post below to learn more about this exciting, new tool! #DHS #Cyber

Have you ever found yourself grappling with the multitude of acronyms and terminology tossed around in everyday tech discussions? 🤔 Fear not! The Australian Cyber Security Centre has put together a comprehensive glossary 📕 to assist those who may not be well versed in the ever-expanding language of the tech world 🌏 For example, do you know what the term "whaling" means? Discover its definition and more by following the link below. 🐳 https://lnkd.in/gprzaErv

🔍 What lies beneath the surface? Uncover the truth behind ongoing cyber threats as discussed by Michael Sikorski from Unit 42 on Threat Vector https://lnkd.in/gKCw8T2i . Explore why understanding your attack surface is crucial in defending against attackers. Stay informed, stay secure! 

The recent advisory by FBI and partner agencies including the Australian Signals Directorate’s Australian Cyber Security Centre (authoring agencies), provides a sample of significant case studies of APT40 techniques in action against two victim networks. The case studies are consequential for cybersecurity practitioners to identify, prevent and remediate APT40 intrusions against their own networks. The PRC state-sponsored cyber group has previously targeted organisations in various countries, including Australia and the United States, and the techniques highlighted below are regularly used by other PRC state-sponsored actors globally. Therefore, the authoring agencies believe the group, and similar techniquesremain a threat to their countries’ networks as well. APT40 rapidly exploits newly public vulnerabilitiesin widely used software such as Log4J (CVE 2021 44228), Atlassian Confluence (CVE-2021-31207, CVE-2021- 26084) and Microsoft Exchange (CVE-2021-31207; CVE-2021-34523; CVE-2021-34473). ASD's ACSC and the authoring agencies expect the group to continue using POCsfor new high-profile vulnerabilities within hours or days of public release. #cybercrime #cybersecurity #investigations

DFIR integrates digital forensics and incident response to streamline investigations and mitigate cyber threats. ISG's Bhuvaneshwari Mohan looks at how DFIR uncovers the root cause, mitigates damage, preserves evidence and prevents future cyber attacks. https://bit.ly/3STokUA