Technical

[bob3160]

New Nobelium activity
https://msrc-blog.microsoft.com/2021/06/25/new-nobelium-activity/

Simple protection is to use two factor authentication.

[Asyn]

Microsoft signed a malicious Netfilter rootkit
https://www.gdatasoftware.com/blog/microsoft-signed-a-malicious-netfilter-rootkit

[Asyn]

REvil ransomware's new Linux encryptor targets ESXi virtual machines
https://www.bleepingcomputer.com/news/security/revil-ransomwares-new-linux-encryptor-targets-esxi-virtual-machines/

[Asyn]

What I did when an email tried to blackmail me
https://blog.avast.com/digging-into-sextortion-emails-avast

[Asyn]

NFC Flaws Let Researchers Hack ATMs by Waving a Phone
https://www.wired.com/story/atm-hack-nfc-bugs-point-of-sale/

[Asyn]

Lorenz ransomware: analysis and a free decryptor
https://www.tesorion.nl/en/posts/lorenz-ransomware-analysis-and-a-free-decryptor/

[Asyn]

CVE-2018-18472: Western Digital My Book Live Mass Exploitation
https://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation/

[Asyn]

Cobalt Strike Usage Explodes Among Cybercrooks
https://threatpost.com/cobalt-strike-cybercrooks/167368/

[Asyn]

CISA releases new ransomware self-assessment security audit tool
https://www.bleepingcomputer.com/news/security/cisa-releases-new-ransomware-self-assessment-security-audit-tool/

[Asyn]

Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise
https://www.microsoft.com/security/blog/2021/06/30/microsoft-finds-new-netgear-firmware-vulnerabilities-that-could-lead-to-identity-theft-and-full-system-compromise/

[Asyn]

Diavol - A New Ransomware Used By Wizard Spider?
https://www.fortinet.com/blog/threat-research/diavol-new-ransomware-used-by-wizard-spider

[Asyn]

Avast researchers fight malware by processing machine data with next-gen machine learning
https://blog.avast.com/processing-machine-data-with-machine-learning-avast
https://arxiv.org/pdf/2105.09107.pdf

[DavidR]

Avast researchers fight malware by processing machine data with next-gen machine learning
https://blog.avast.com/processing-machine-data-with-machine-learning-avast
https://arxiv.org/pdf/2105.09107.pdf

I just wonder how this new machine learning improves detection and yet doesn't see an increase FPs

Whilst I don't think this would impact so much on the Web Shied (EDIT- having read further, it seems it does), we do appear to be seeing a slight increase in 'possible' FPs in the forums.

[Asyn]

Avast researchers fight malware by processing machine data with next-gen machine learning
https://blog.avast.com/processing-machine-data-with-machine-learning-avast
https://arxiv.org/pdf/2105.09107.pdf

I just wonder how this new machine learning improves detection and yet doesn't see an increase FPs

Whilst I don't think this would impact so much on the Web Shied (EDIT- having read further, it seems it does), we do appear to be seeing a slight increase in 'possible' FPs in the forums.

Hi Dave, guess it still needs some fine-tuning.

[Asyn]

NSA, Partners Release Cybersecurity Advisory on Brute Force Global Cyber Campaign
https://www.nsa.gov/news-features/press-room/Article/2677750/nsa-partners-release-cybersecurity-advisory-on-brute-force-global-cyber-campaign/
https://media.defense.gov/2021/Jul/01/2002753896/-1/-1/1/CSA_GRU_GLOBAL_BRUTE_FORCE_CAMPAIGN_UOO158036-21.PDF