Main Findings Implications Recommendations Conclusion The Pentera survey emphasizes the urgent need for organizations to embrace continuous security validation and prioritize effective management of cybersecurity risks in the face of evolving threats and limited resources.
Russian hacker group Sandworm, also known as BlackEnergy, targeted approximately 20 critical infrastructure sites in Ukraine, aiming to disrupt operations. Associated with Russia’s GRU, they conducted cyberespionage and destructive attacks on energy, water, and heating suppliers across ten Ukrainian regions in March 2024. Employing tactics like poisoning the software supply chain and leveraging software provider…
Threat actors could exploit the DOS-to-NT path conversion process to gain rootkit-like capabilities, concealing and impersonating files, directories, and processes. SafeBreach researcher Or Yair revealed this at the Black Hat Asia conference. MagicDot paths enable rootkit-like functions for unprivileged users, allowing them to execute malicious actions without admin permissions. These actions include hiding files, affecting…
APT28, a Russian threat group, exploits a Windows Print Spooler vulnerability using a tool called GooseEgg to escalate privileges and steal data, as warned by Microsoft. This tool targets a flaw reported by the NSA, allowing attackers to run commands with SYSTEM-level privileges and launch additional malicious tools. APT28, linked to Russia’s GRU, deploys GooseEgg…
Synlab Italia, part of a global network, has halted medical services due to a ransomware attack, impacting 380 labs and centers in Italy. The breach, detected on April 18, led to a complete shutdown of IT systems. Though not confirmed, sensitive medical data may have been compromised. Laboratory services are suspended, with customers advised to…