BuzzSec

New data shows that not only has just about every organization experienced a successful phishing attack , but that they are also paying the price in a number of impactful ways. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/92-percent-organizations-phishing-victims

A new Golang-based botnet dubbed HinataBot has been observed to leverage known flaws to compromise routers and servers and use them to stage distributed denial-of-service (DDoS) attacks. "The malware binaries appear to have been named by the malware author after a character from the popular anime series, Naruto, with file name structures such as 'Hinata--,'" Akamai said in a from The Hacker News https://thehackernews.com/2023/03/new-golang-based-hinatabot-exploiting.html

In the modern corporate IT environment, which relies on cloud connectivity, global connections and large volumes of data, the browser is now the most important work interface. The browser connects employees to managed resources, devices to the web, and the on-prem environment to the cloud one. Yet, and probably unsurprisingly, this browser prominence has significantly increased the number of from The Hacker News https://thehackernews.com/2023/03/a-new-security-category-addresses-web.html

Copycat websites for instant messaging apps like Telegram and WhatApp are being used to distribute trojanized versions and infect Android and Windows users with cryptocurrency clipper malware. "All of them are after victims' cryptocurrency funds, with several targeting cryptocurrency wallets," ESET researchers Lukáš Štefanko and Peter Strýček said in a new analysis. While the first instance of from The Hacker News https://thehackernews.com/2023/03/lookalike-telegram-and-whatsapp.html

Google is calling attention to a set of severe security flaws in Samsung's Exynos chips, some of which could be exploited remotely to completely compromise a phone without requiring any user interaction. The 18 zero-day vulnerabilities affect a wide range of Android smartphones from Samsung, Vivo, Google, wearables using the Exynos W920 chipset, and vehicles equipped with the Exynos Auto T5123 from The Hacker News https://thehackernews.com/2023/03/google-uncovers-18-severe-security.html

00:00 – PreShow Banter™ — Tossing Money at Problems00:58 – BHIS – Talkin’ Bout [infosec] News 2023-03-1301:41 – Story # 1: Silicon Valley Bank collapse: Treasury, Fed, and FDIC announce […] The post Talkin’ About Infosec News – 3/16/2023 appeared first on Black Hills Information Security . from Black Hills Information Security https://www.blackhillsinfosec.com/talkin-about-infosec-news-3-16-2023/

Phishing emails increase in volume every month and every year, so we created this free resource kit to help you defend against attacks. Request your kit now to learn phishing mitigation strategies, what new trends and attack vectors you need to be prepared for, and our best advice on how to protect your users and your organization. Javvad Malik, Lead Security Awareness Advocate at KnowBe4, explains more about why you need this kit and details on what is included: from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/free-phishing-security-resource-kit