Blog - Cyber Bunee

bunee
November 14, 2023
No Comments

“Mastering Dependabot: Streamlining Software Development by Automating Dependency Updates”

Introducing Dependabot: Your New Software Assistant Main Overview: Dependabot is a tool that identifies and updates outdated dependencies in software projects. The software not only highlights the outdated dependencies, but also offers on-point suggestions for modifications. With a simple click, users can approve these modifications. The application, however, has limited capabilities. Trusted Companion for Software

bunee
November 14, 2023
No Comments

Unmasking IronWind: Understanding the Cyber Threat Sweeping Across the Middle East

The Middle East Under IronWind: A Cyber Story Main Points A new phishing campaign targets Middle East government entities, designed to unleash an initial access downloader named IronWind. The activity, observed between July and October 2023, is credited to a threat actor tracked by Proofpoint under the metadata ‘TA402’. TA402 bears additional aliases like Molerats,

bunee
November 14, 2023
No Comments

“Vietnamese Cyber Threat Targets Indian Marketing Sector: New Ducktail Tactics Unveiled”

Vietnamese Threat Actors Strike Again: Targeting Indian Marketing Pros Ducktail stealer malware threat actors are tied to a recent campaign that concentrated on marketing professionals in India. The campaign purposed to highjack Facebook business accounts, ran from March to early October 2023. Distinctively, the campaign used Delphi as the programming language, dropping the .NET applications

bunee
November 14, 2023
No Comments

“Timing the Cybersecurity Fix: Meeting CISA’s Juniper Junos OS Vulnerabilities Deadline”

Tightening Up the Cybersecurity Web: CISA Deadline for Juniper Fixes – The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies and organizations to mend several security vulnerabilities in Juniper Junos OS by November 17, 2023. – Five vulnerabilities were newly added to the Known Exploited Vulnerabilities (KEV) catalogue due to evidence of

bunee
November 13, 2023
No Comments

Unmasking the New Ransomware Threat: An Insight into Hunters International

A New Wave of Ransomware Threat: Hunters International The Rise of Hunters International Ransomware Group Move over Hive, there’s a new colony in town! The threat landscape has a new player, and it’s named Hunters International. Kicked into action with a little help from its retired friends, this new ransomware group has taken charge by

bunee
November 13, 2023
No Comments

“Cracking Down on BulletProofLink: How Malaysian Authorities Dismantled a Global Phishing-as-a-Service Operation”

Malaysian Authorities Squash BulletProofLink, a Phishing-as-a-Service (PhaaS) Operation BulletPoints – Malaysian law enforcement dismantled a Phishing-as-a-Service operation, BulletProofLink. – The Royal Malaysian Police led the effort with support from the Australian Federal Police (AFP) and the U.S. Federal Bureau of Investigation (FBI) on November 6, 2023. – The operation was based on intel hinting the

bunee
November 13, 2023
No Comments

Unmasking Chinese Cyber Espionage: Examining High-Profile Hacks on Cambodian Government

Chinese Hacking Groups in Hot Water for Targeting Cambodian Government – Cybersecurity researchers have unveiled malicious cyber activities conducted by two prominent Chinese hacking groups targeted at Cambodian government organizations. – It is speculated that these activities are part of an extensive espionage campaign. – These actions align with the geopolitical goals of China. Behind

bunee
November 11, 2023
No Comments

“Unveiling Lazarus Group’s New Strategy: Bogus Skills Assessment Sites for Cyber Espionage”

Lazarus Group’s Sub-cluster Sets Up Fake Skills Assessment Site to Breach Security • Lazarus Group sub-cluster associated with various names including Sapphire Sleet, APT38, BlueNoroff, CageyChameleon, and CryptoCore unveiled a new strategy in their cyber espionage campaigns. • This new infrastructure is designed to copy skills assessment portals. • The tactic shows a significant shift

bunee
November 10, 2023
No Comments

“Unveiling Sandworm’s Cyber Attack: A Unique Power Play in Ukraine’s Industrial Control Systems”

Russian hacking group Sandworm targeted an electrical substation in Ukraine, causing an outage in October 2022. Google’s Mandiant described the hack as a “multi-event cyber attack” using a unique method to affect industrial control systems (ICS). The attackers used OT-level living-off-the-land (LotL) techniques initially. “Bug Alert: Sandworm’s Power Play in Ukraine” Last year, the notorious

bunee
November 10, 2023
No Comments

Unmasking Effluence: The Stealthy Backdoor Exploiting Atlassian Confluence Data Center

Stealthy Backdoor “Effluence” Attacks Atlassian Confluence Data Center • A recent discovery by cyber-security researchers unveils a sneaky backdoor named Effluence that hits upon exploiting a security defect in Atlassian Confluence Data Center and Server. • Effluence serves as a permanent backdoor and remains unaffected even when patches are applied to Confluence as indicated by

Latest Cyber Bunee Academy News