Blog
Security, networks and the occasional questionable decision, mostly with the Philippines in view.
[Cloudflare] mitigates record-breaking 71 million request-per-second DDoS attack
Cloudflare detected and mitigated dozens of hyper-volumetric DDoS attacks over a single weekend. Most peaked at 50 to 70 million requests per second, and the largest exceeded 71 million, a record-breaking attack. The Cloudflare Blog has the full breakdown.
[theregister] Lufthansa flights grounded by major IT snafu, 'construction work' blamed
Lufthansa Group had to delay or cancel flights after a major IT outage, which it blamed on a broadband cable cut during construction work. The Register covers the disruption and what it says about resilience in critical airline infrastructure.
[KnowBe4] How Artificial Intelligence Can Make or Break Cybersecurity
With ChatGPT, artificial intelligence is no longer science fiction, and that creates new problems for cybersecurity professionals. KnowBe4's James McQuiggan looks at how AI can both strengthen and undermine security, depending on who is using it.
[infosecurity] UK Metal Engineering Firm Vesuvius Hit by Cyber-Attack
Vesuvius, a UK-based molten metal flow engineering company, disclosed on February 6, 2023, that it was managing a cyber incident involving unauthorized access to its systems. Infosecurity Magazine reports that the company has started an investigation to find out how far it goes.
[ISC] JUGGLING THE DEMANDS OF A MULTICLOUD ENVIRONMENT
Organizations are moving assets from on-premises systems into multiple clouds to cut costs and gain agility, but every added provider makes security harder. The (ISC)² blog looks at how to juggle the operational and security demands of a multicloud environment.
[HEIMDAL] PixPirate Malware Is Actively Stealing Banking Passwords
PixPirate is a new strain of Android banking malware that is actively stealing banking passwords. Heimdal Security says it still appears to be in its early stages, which means more threats built on it may follow. Here's what's known so far.
[KnowBe4] Thinking Critically About Your Online Behavior
Social engineering works because people act on autopilot. KnowBe4's Stu Sjouwerman argues that employees need to change their mindset and think critically about their online behavior if they want to defend themselves, and their organizations, against these attacks.
[Security Intelligence] How to Spot a Nefarious Cryptocurrency Platform
If you own a cryptocurrency account, do you ever wonder whether your platform cashes in ransomware payments? Security Intelligence's Jonathan Reed looks at how to spot a nefarious cryptocurrency platform before you trust it with your money.
[TrustedSec] TEAMFILTRATION V3.5.0 – IMPROVE ALL THE THINGS!
TrustedSec has released TeamFiltration v3.5.0, a cross-platform framework for enumerating, password spraying, exfiltrating from, and backdooring Microsoft 365 and Azure AD accounts. The release improves the tool across the board, and it's available on GitHub.
[HackRead] Benefits Of Having Video Surveillance In Your Business
HackRead's Owais Sultan makes the case for video surveillance in businesses and outlines the benefits it can bring.
