Navigation section
credential theft
-
AA20-206A: Threat Actor Exploitation of F5 BIG-IP CVE-2020-5902
Original release date: July 24, 2020 Summary The Cybersecurity and Infrastructure Security Agency (CISA) is issuing this alert in response to recently disclosed exploits that target F5 BIG-IP devices that are vulnerable to CVE-2020-5902. F5 Networks, Inc. (F5) released a patch for CVE-2020-5902...- News
- Thread
- cisa credential theft cve-2020-5902 cybersecurity data exfiltration detection digital security exploitation f5 big-ip incident response it security malware mitigation network segmentation patch management remote code execution security advisory system compromise threat actor vulnerability
- Replies: 0
- Forum: Security Alerts
-
AA20-099A: COVID-19 Exploited by Malicious Cyber Actors
Original release date: April 8, 2020 Summary This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC). This alert provides information on...- News
- Thread
- apt cisa compromise covid-19 credential theft cybersecurity email security indicators malicious actors malware mitigation ncsc phishing ransomware remote access scams teleconferencing teleworking vpn
- Replies: 0
- Forum: Security Alerts
-
AA20-107A: Continued Threat Actor Exploitation Post Pulse Secure VPN Patching
Original release date: April 16, 2020 Summary Note: This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques and mitigations. This Alert provides an update...- News
- Thread
- active directory credential theft cve-2019-11510 cyber threat cybersecurity data exfiltration detection exploitation incident response indicators of compromise lateral movement malware mitigation network security patching pulse secure remote access threat actor vpn vulnerability
- Replies: 0
- Forum: Security Alerts
-
AA20-099A: COVID-19 Exploited by Malicious Cyber Actors
Original release date: April 8, 2020 Summary This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC). This alert provides information on...- News
- Thread
- apt groups cisa covid-19 credential theft cyber attacks cybersecurity exploitation indicators of compromise malicious software malware mitigation ncsc phishing ransomware remote access scams teleconferencing teleworking vpn
- Replies: 0
- Forum: Security Alerts
-
TA18-276B: Advanced Persistent Threat Activity Exploiting Managed Service Providers
Original release date: October 3, 2018 Systems Affected Network Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) is aware of ongoing APT actor activity attempting to infiltrate the networks of global managed service providers (MSPs). Since May 2016...- News
- Thread
- apt authentication cloud security credential theft cybersecurity data protection incident reporting incident response logging managed service providers mitigation network architecture network security operational controls powershell risk management supply chain system integrity technical alert threat detection
- Replies: 0
- Forum: Security Alerts
-
TA18-276B: Advanced Persistent Threat Activity Exploiting Managed Service Providers
Original release date: October 03, 2018 Systems Affected Network Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) is aware of ongoing APT actor activity attempting to infiltrate the networks of global managed service providers (MSPs). Since May 2016...- News
- Thread
- apt attack vectors cloud computing credential theft cybersecurity data protection incident reporting incident response malicious activity managed service providers mitigation techniques nccic network security operational controls security controls system administration technical alert threat actors threat intelligence vulnerability management
- Replies: 0
- Forum: Security Alerts
-
TA18-201A: Emotet Malware
Original release date: July 20, 2018 Systems Affected Network Systems Overview Emotet is an advanced, modular banking Trojan that primarily functions as a downloader or dropper of other banking Trojans. Emotet continues to be among the most costly and destructive malware affecting state...- News
- Thread
- antivirus banking trojan credential theft cybersecurity data loss dhs email security emotet infection malicious emails malspam malware ms-isac network security persistence phishing remediation system security threat analysis windows
- Replies: 0
- Forum: Security Alerts
-
TA17-117A: Intrusions Affecting Multiple Victims Across Multiple Sectors
Original release date: April 27, 2017 Systems Affected Networked Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) has become aware of an emerging sophisticated campaign, occurring since at least May 2016, that uses multiple malware implants. Initial...- News
- Thread
- attack vectors credential theft cybersecurity data breach defense strategies indicators of compromise intrusion it security it service providers malware nccic network security network traffic plugx rat redleaves risk evaluation threat actors vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
Mitigating Credential Theft using the Windows 10 Isolated User Mode
In this video Seth Moore describes another benefit of the Windows 10 Isolated User Mode: credential theft mitigation. He first describes the kinds of credentials that can be stolen and how a hacker gains access to them. He then describes how the Windows 10 Isolated User Mode prevents the typical...- News
- Thread
- access control compromise computing environment credential theft cybersecurity hacking innovation isolated user mode mitigation protection security seth moore system security tech insights user mode video vigilance windows 10 windows kernel
- Replies: 0
- Forum: Live RSS Feeds
-
AAEH Malware: Overview, Impact, and Mitigation Strategies for Multiple Windows Systems
Original release date: April 09, 2015 Systems Affected Microsoft Windows 95, 98, Me, 2000, XP, Vista, 7, and 8 Microsoft Server 2003, Server 2008, Server 2008 R2, and Server 2012 Overview AAEH is a family of polymorphic downloaders created with the primary purpose of downloading other...- News
- Thread
- aaeh anti-virus beebone credential theft cybersecurity dhs downloaders fbi impact malware mitigation network security passwords polymorphic prevention ransomware rar archive removal tools systems affected zip archive
- Replies: 0
- Forum: Security Alerts
-
Taste of Premier: How to Mitigate Pass-the-Hash and Other Forms of Credential Theft
Lex Thomas welcomes Mark Simos, an Architect for the Cyber, Security and Identity team here at Microsoft, to discuss tools, techniques and services that are available to help mitigate “Pass-the-Hash” and other forms of cyber credential theft. Tune in as they give us an in-depth overview of the...- News
- Thread
- active directory cloud solutions credential theft cyber security identity management it architecture microsoft network security pass-the-hash podcast privileged access security features security overview security tools system center teched threat mitigation virtualization windows 10 windows server
- Replies: 0
- Forum: Live RSS Feeds
-
TA14-317A: Apple iOS "Masque Attack" Technique
Original release date: November 13, 2014 Systems Affected iOS devices running iOS 7.1.1, 7.1.2, 8.0, 8.1, and 8.1.1 beta. Overview A technique labeled “Masque Attack” allows an attacker to substitute malware for a legitimate iOS app under a limited set of circumstances. Description...- News
- Thread
- app store apple attacker technique background monitoring credential theft cybersecurity fireeye installation ios malware masque attack mitigation mobile security phishing root privileges security software update untrusted app user data vulnerability
- Replies: 0
- Forum: Security Alerts
-
July 2014 Security Bulletin Release
Many around the globe have been following the 2014 FIFA World Cup Brazil™ closely. Regardless of which country you are supporting, many folks have been impressed by the defensive display put on by keeper Tim Howard in a loss against Belgium. It was a great performance highlighting a strong...- News
- Thread
- adobe flash browser upgrade bulletin credential theft critical cve enhanced protection mode enterprise security important internet explorer moderate remote code execution security server security smartscreen updates vulnerabilities webcast windows windows journal
- Replies: 0
- Forum: Security Alerts
-
TA14-150A: GameOver Zeus P2P Malware
Original release date: June 02, 2014 Systems Affected Microsoft Windows 95, 98, Me, 2000, XP, Vista, 7, and 8 Microsoft Server 2003, Server 2008, Server 2008 R2, and Server 2012 Overview GameOver Zeus (GOZ), a peer-to-peer (P2P) variant of the Zeus family of bank credential-stealing malware...- News
- Thread
- anti-virus banking theft credential theft cybercrime cybersecurity data protection ddos attacks gameover zeus infection solutions malware malware removal online safety p2p network phishing security alert technical alert updates user privacy windows systems
- Replies: 0
- Forum: Security Alerts
-
Update to Improve Credentials Protection and Management - Version: 1.0
Revision Note: V1.0 (May 13, 2014): Advisory published. Summary: Microsoft is announcing the availability of an update for supported editions of Windows 8, Windows RT, Windows Server 2012, Windows 7, and Windows Server 2008 R2 that improves credential protection and domain authentication...- News
- Thread
- authentication client machines credential theft credentials credssp domain user lsa management may 2014 microsoft policy enforcement protection restricted admin security server 2008 server 2012 update windows 7 windows 8 windows rt
- Replies: 0
- Forum: Security Alerts
-
Update to Improve Credentials Protection and Management - Version: 1.0
Revision Note: V1.0 (May 13, 2014): Advisory published. Summary: Microsoft is announcing the availability of an update for supported editions of Windows 8, Windows RT, Windows Server 2012, Windows 7, and Windows Server 2008 R2 that improves credential protection and domain authentication...- News
- Thread
- authentication credential theft credentials management protection security update windows 7 windows 8 windows server
- Replies: 0
- Forum: Security Alerts