SecurITy At Miner

  Supply chain research seeks out the software openings oftentimes exploited WEST LAFAYETTE, Ind. — A computer system’s cybersecurity can be jeopardized by its own software as much as the questionable decisions made by computer users. A Purdue University professor is focused on halting those software attacks, which statistics indicate are on the rise. Santiago Torres Arias , an assistant professor of electrical and computer engineering at Purdue, said a cumulative increase of 500% in the number of software supply chain compromises is giving hackers the weak link they need to attack a system. Torres Arias said that in supply chain security, hackers will search to find that one program in a chain of software that is vulnerable and hack it. “Supply chain security compromises are attacks where someone targets the left side of the equation and how a piece of software is produced,” Torres Arias said. “They’re not targeting the people using the system, but rather the producers, so that wh...

  Hive ransomware, which was first observed in June 2021 and likely operates as an affiliate-based ransomware, employs a wide variety of tactics, techniques, and procedures (TTPs), creating significant challenges for defense and mitigation. Hive ransomware uses multiple mechanisms to compromise business networks, including phishing emails with malicious attachments to gain access and Remote Desktop Protocol (RDP) to move laterally once on the network. After compromising a victim network, Hive ransomware actors exfiltrate data and encrypt files on the network. The actors leave a ransom note in each affected directory within a victim’s system, which provides instructions on how to purchase the decryption software. The ransom note also threatens to leak exfiltrated victim data on the Tor site, “HiveLeaks.” For technical details regarding the attach, visit the link below. FBI Flash=TPWhite

  https://thehackernews.com/2021/08/microsoft-warns-of-widespread-phishing.html