New AlienFox toolkit harvests credentials for tens of cloud services
AlienFox is a novel comprehensive toolset for harvesting credentials for multiple cloud service providers, SentinelLabs reported. AlienFox …
Cloud Computing
S3 Ep128: So you want to be a cybercriminal? [Audio + Text]
DOUG. Honeypots, patches and the passing of an icon. All that and more on the Naked Security …
Celebrity Vulnerabilities: Effective Response to Critical Production Threats
Alyssa Miller, chief information security officer of EpiqGlobal, presented at QCon London about the lessons learned from three major …
AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud Services
A new “comprehensive toolset” called AlienFox is being distributed on Telegram as a way for threat actors to harvest credentials from API …
NCA Celebrates Multimillion-Pound Fraud Takedowns
The UK agency for serious and organized crime has revealed a month-long anti-fraud operation resulted in 290 arrests and the seizure or …
How to use Amazon GuardDuty and AWS WAF v2 to automatically block suspicious hosts
In this post, we’ll share an automation pattern that you can use to automatically detect and block suspicious hosts that are attempting …
The Infinite Journey of Zero Trust Is Worth the Cost, Federal Officials Say
The enactment of zero trust cybersecurity policy — wherein, essentially, users are required to provide credentials at every new access …
Compliance In The Cloud: Why IAM Is Critical
In this post, I will show you why IAM is critical and essential for compliance in the cloud. Cloud adoption is more and more popular in …
Bitwarden Announces Secrets Management With a Combination of Open Source, End-to-End Encryption, and Ease of Use
Bitwarden already protects millions of individuals and businesses by securing their online credentials and critical information. Today, …
Cops use fake DDoS services to take aim at wannabe cybercriminals
The UK’s National Crime Agency (NCA) has recently announced work that it’s been doing as an ongoing part of a multinational project …
Sinister MacStealer Malware Steals Mac Passwords And Other Private Data
A highly malicious malware is infecting Intel- and M-powered Macs, stealing sensitive information such as user passwords, credit card info, …
MacStealer MacOS Malware Steals Passwords from iCloud Keychain
Researchers discovered a new MacOS info-stealer that extracts documents, cookies, and login data from infected devices. MacStealer uses …
New MacStealer macOS Malware Steals iCloud Keychain Data and Passwords
A new information-stealing malware has set its sights on Apple’s macOS operating system to siphon sensitive information from compromised …
NCA Harvests Info on DDoS-For-Hire With Fake Booter Sites
The UK’s National Crime Agency (NCA) has revealed it is running several fake DDoS-for-hire websites in a bid to disrupt this thriving …