BreachForums Seized, GitHub Abused by Threat Actors, Apple Fraud Success, DocuSign Blackmail

Substack Update: The Importance of CISO Tenure

James, the host, highlights the latest Substack article focusing on the critical role of Chief Information Security Officers (CISOs) in building a resilient cybersecurity posture.

Action Points:

1. Leadership Engagement: Business leaders should prioritize the selection and support of CISOs to enhance cybersecurity resilience.

2. Read and Support: Subscribe to the Substack and support the podcast for more insightful articles and exclusive merchandise.

FBI Seizes BreachForum

The FBI, in collaboration with international partners, has seized the notorious BreachForum, known for leaking stolen corporate data. The site is now under FBI control, potentially providing valuable insights into cybercriminal activities.

Action Points:

1. Monitor Communications: Check for any breach-related notifications from law enforcement if your data might be involved.

2. Report Suspicious Activity: Contact the FBI with any information about cybercriminal activities linked to BreachForum.

Ransomware Hits Wichita and Other Cities

The city of Wichita, Kansas, faces ongoing challenges from a ransomware attack that compromised sensitive law enforcement information. Similar attacks have affected St. Helena, California, and Macon County, Georgia.

Action Points:

1. Enhance Security Measures: Review and strengthen cybersecurity protocols to protect against ransomware.

2. Stay Informed: Follow updates from local authorities regarding the status of affected systems and data breaches.

Intel's Massive Patch Tuesday Release

Intel has issued updates addressing 90 vulnerabilities, including a critical flaw in its neural compressor AI product. The updates span various products, emphasizing the importance of timely security patching.

Action Points:

1. Apply Patches: Ensure all Intel products are updated with the latest security patches.

2. Review Vulnerabilities: Assess the impact of identified vulnerabilities on your systems and take appropriate action.

GitHub Profile Abused to Spread Malware

A malicious campaign is using a legitimate GitHub profile to distribute information-stealing malware targeting macOS applications. The campaign is linked to a Russian-speaking threat actor.

Action Points:

1. Verify Software Sources: Only download applications from trusted and verified sources.

2. Monitor for Malware: Implement robust monitoring tools to detect and mitigate malware infections.

Apple's Fight Against Fraud

Apple has prevented over $7 billion in fraudulent transactions and blocked millions of stolen credit cards and fraudulent accounts. Their stringent app review process has rejected numerous malicious apps.

Action Points:

1. Stay Vigilant: Regularly review and update your security settings on Apple devices.

2. Report Fraud: Immediately report any suspicious activity on your Apple accounts.

Increase in Phishing Attacks Mimicking DocuSign

Researchers have noted a rise in phishing attacks that imitate DocuSign requests, leveraging templates from underground marketplaces to deceive victims.

Action Points:

1. Educate Employees: Train employees to recognize and avoid phishing scams.

2. Implement Verification Processes: Use multi-factor authentication and other verification methods for sensitive transactions.

Boost in Security Budgets Anticipated

A KPMG study reveals that security operations budgets are expected to increase by 20% over the next two years, driven by new regulations and heightened security needs.

Action Points:

1. Plan Ahead: Allocate budget increases effectively to address the most critical security gaps.

2. Stay Compliant: Ensure compliance with evolving security regulations to avoid penalties.

EU's Struggle with Spyware Regulation

The EU faces challenges in regulating spyware due to a lack of political will, as highlighted in a recent conference on the issue.

Action Points:

1. Advocate for Stronger Regulations: Support initiatives calling for stricter controls on spyware use.

2. Enhance Personal Security: Use privacy-enhancing technologies to protect against spyware.

LogRhythm and Exabeam Merger

LogRhythm and Exabeam, two major players in the Security Information and Event Management (SIEM) space, are merging to enhance their capabilities in threat detection and response.

Action Points:

1. Evaluate Impact: Assess how the merger might affect existing SIEM solutions and support.

2. Leverage New Capabilities: Explore new features and improvements offered by the combined entity.

Closing Remarks:

Thank you for joining us today. Remember to subscribe to our channel and check out our Substack for more updates. Stay cyber safe!

Upcoming Event:

Join us tomorrow at 11 a.m. as Chris Foulon and I discuss cybersecurity frameworks, featuring CIS Top 20 and the NIST framework. Don't miss it!

✅ Story Links: 

https://www.bleepingcomputer.com/news/security/fbi-seize-breachforums-hacking-forum-used-to-leak-stolen-data/

https://therecord.media/law-enforcement-data-stolen-wichita-ransomware

https://www.securityweek.com/intel-publishes-41-security-advisories-for-over-90-vulnerabilities/

https://www.securityweek.com/threat-actors-abuse-github-to-distribute-multiple-information-stealers/

https://www.bleepingcomputer.com/news/security/apple-blocked-7-billion-in-fraudulent-app-store-purchases-in-4-years/

https://www.darkreading.com/threat-intelligence/scammers-fake-docusign-templates-blackmail-steal-companies

https://www.cybersecuritydive.com/news/cyber-security-operations-center-budget-SOC/716072/

https://therecord.media/eu-failure-spyware-political-will

https://www.securityweek.com/thoma-bravo-owned-logrhythm-announces-merger-with-rival-exabeam/

🔔 Subscribe now for the latest insights from industry leaders, in-depth analyses, and real-world strategies to secure your digital world. https://www.youtube.com/@TheCyberHubPodcast/?sub_confirmation=1  

✅ Important Links to Follow: 

👉Website:

👉Substack:

👉Listen here: https://linktr.ee/cyberhubpodcast   

✅  Stay Connected With Us.

👉Website:

 

👉Rumble: https://rumble.com/c/c-1353861 

👉Facebook: https://www.facebook.com/CyberHubpodcast/ 

👉Linkedin: https://www.linkedin.com/company/cyberhubpodcast/ 

👉Twitter (X): https://twitter.com/cyberhubpodcast 

👉Instagram: https://www.instagram.com/cyberhubpodcast 

✅ For Business Inquiries:  info@cyberhubpodcast.com

=============================

✅ Other Videos You Might Be Interested In Watching: 

👉 My thoughts on Israel from this morning's episode and the current state of cybersecurity attacks  

 

👉 A Deep Dive into the MGM Resorts Ransomware - An Inside look into the current FACTS  

 

👉 The Latest on the MGM Resorts Ransomware Attack & its impact on Vegas and Cybersecurity overall  

 

👉 What Does Omer Adam & Tel Aviv have to do with Cybersecurity? Find out on CISO Talk  

 

👉 Iran is targeting Israel using its proxies that are Hamas & Hizballah & using cyber-warfare  

 

 =============================

✅ About The CyberHub Podcast.

The Hub of the Infosec Community. 

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure. 

Tune in to our series of podcasts that provide everything from highlighting CISO in our CISOTalk Podcast or our signature CyberHub Podcast giving you the latest news live daily.