December 2022 – Page 11 – PossibleThreat Articles

Six Charged in Mass Takedown of DDoS-for-Hire Sites

December 14, 2022 0 Comments DDoS-for-hire, Ne'er-Do-Well News

Credit to Author: BrianKrebs| Date: Wed, 14 Dec 2022 19:58:00 +0000

The U.S. Department of Justice (DOJ) today seized four-dozen domains that sold “booter” or “stresser” services — businesses that make it easy and cheap for even non-technical users to launch powerful Distributed Denial of Service (DDoS) attacks designed knock targets offline. The DOJ also charged six U.S. men with computer crimes related to their alleged ownership of the popular DDoS-for-hire services.

Independent Krebs Security

Microsoft Patch Tuesday, December 2022 Edition

December 14, 2022 0 Comments apple zero-day, cve-2022-41076, cve-2022-44698, cve-2022-44710, cve-2022-44713, greg wiseman, immersive labs, kevin breen, Latest Warnings, microsoft patch tuesday december 2022, PowerShell, rapid7, security tools, sophos, Time to Patch, trend micro's zero day initiative, will dormann, Windows

Credit to Author: BrianKrebs| Date: Wed, 14 Dec 2022 17:01:07 +0000

Microsoft has released its final monthly batch of security updates for 2022, fixing more than four dozen security holes in its various Windows operating systems and related software. The most pressing patches include a zero-day vulnerability in a Windows feature that tries to flag malicious files from the Web, a critical bug in PowerShell, and a dangerous flaw in Windows 11 systems that was detailed publicly prior to this week’s Patch Tuesday.

Security Wired

Cuba Ransomware Gang Abused Microsoft Certificates to Sign Malware

December 14, 2022 0 Comments Security, Security / Cyberattacks and Hacks, Security / Security News

Credit to Author: Lily Hay Newman| Date: Tue, 13 Dec 2022 21:28:57 +0000

The company has taken measures to mitigate the risks, but security researchers warn of a broader threat.

Security Wired

Why the US Is Primed for Radicalization

December 14, 2022 0 Comments business / national affairs, Security, Security / National Security

Credit to Author: Thor Benson| Date: Mon, 12 Dec 2022 12:00:00 +0000

A confluence of factors is leading people in the nation to gravitate toward extremist views.

Security Sophos

The scammers who scam scammers on cybercrime forums: Part 2

December 14, 2022 0 Comments breachforums, Exploit, marketplaces, RaidForums, scams, sophos x-ops, threat research, XSS

Credit to Author: Matt Wixey| Date: Wed, 14 Dec 2022 12:00:20 +0000

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the second part of our series, we look at the different flavors of scams prevalent on criminal forums

Microsoft Security

Cyber Signals: Risks to critical infrastructure on the rise

December 14, 2022 0 Comments cybersecurity, Security Intelligence, Zero Trust

Credit to Author: Emma Jones| Date: Wed, 14 Dec 2022 12:30:00 +0000

Today, the third edition of Cyber Signals was released spotlighting security trends and insights gathered from Microsoft’s 43 trillion daily security signals and 8,500 security experts.

The post Cyber Signals: Risks to critical infrastructure on the rise appeared first on Microsoft Security Blog.

Security TrendMicro

Probing Weaponized Chat Applications Abused in Supply-Chain Attacks

December 14, 2022 0 Comments trend micro research : articles, news, reports, trend micro research : endpoints, trend micro research : exploits & vulnerabilities, trend micro research : research

Credit to Author: Jaromir Horejsi| Date: Wed, 14 Dec 2022 00:00:00 +0000

This report examines the infection chain and the pieces of malware used by malicious actors in supply-chain attacks that leveraged trojanized installers of chat-based customer engagement platforms.

Security Sophos