Security News > 2021 > April > Week in review: New DNS vulnerabilities, benefits of cyber threat intelligence, FBI removes web shells
New DNS vulnerabilities have the potential to impact millions of devicesForescout Research Labs, in partnership with JSOF, disclosed a new set of DNS vulnerabilities, dubbed NAME:WRECK. FBI removes web shells from hacked Microsoft Exchange serversAuthorities have executed a court-authorized operation to copy and remove malicious web shells from hundreds of vulnerable on-premises versions of Microsoft Exchange Server software in the United States.
The benefits of cyber threat intelligenceIn this Help Net Security podcast, Maurits Lucas, Director of Intelligence Solutions at Intel 471, discusses the benefits of cyber threat intelligence.
Detection capabilities improve, but ransomware surges onA FireEye report outlines critical details on trending attacker techniques and malware, the proliferation of multifaceted extortion and ransomware, preparing for expected UNC2452 / SUNBURST copycat threat actors, growing insider threats, plus pandemic and industry targeting trends.
DDoS attack activity: 10 million-plus attacks and 22% increase in attack frequencyNetscout announced findings from its bi-annual Threat Intelligence Report, punctuated by a record-setting 10,089,687 DDoS attacks observed during 2020.
Advice for aspiring threat hunters, investigators, and researchers from the old town folkAspiring threat hunters, investigators and researchers clearly need a better idea about what their prospective employers are looking for in an ideal candidate.
Infection Monkey: Open source tool allows zero trust assessment of AWS environmentsGuardicore unveiled new zero trust assessment capabilities in Infection Monkey, its open source breach and attack simulation tool.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/xN5Ha9ghycY/
Related news
- 5 Techniques for Collecting Cyber Threat Intelligence (source)
- Threat Actors Are Exploiting Vulnerabilities Faster Than Ever (source)
- U.S. Government Issues New TLP Guidance for Cross-Sector Threat Intelligence Sharing (source)
- Increasing Awareness of DNS Hijacking: A Growing Cyber Threat (source)
- FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023 (source)