Forwarded from SecurityLab.ru
В арсенале APT-группы Turla появился один из самых высокотехнологичных бэкдоров, когда-либо обнаруженных исследователями безопасности. Бэкдор под названием LightNeuron специально разработан для почтовых серверов Microsoft Exchange и работает как агент пересылки сообщений – функционал, никогда ранее не встречавшийся среди бэкдоров.
APT-группа Turla в течение 5 лет успешно скрывала мощнейший бэкдор
APT-группа Turla в течение 5 лет успешно скрывала мощнейший бэкдор
SecurityLab.ru
APT-группа Turla в течение 5 лет успешно скрывала мощнейший бэкдор
LightNeuron был специально создан для взаимодействия с почтовым сервером Microsoft Exchange.
Самое время проверить для ваших инсталяций sap используете ли вы дефолтные настройки безопасности.
https://www.csoonline.com/article/3393440/public-sap-exploits-could-enable-attacks-against-thousands-of-companies.amp.html
https://www.csoonline.com/article/3393440/public-sap-exploits-could-enable-attacks-against-thousands-of-companies.amp.html
CSO Online
Public SAP exploits could enable attacks against thousands of companies
A recently released exploit takes advantage of a known configuration vulnerability that persists among many on-premise and cloud SAP instances. Here's what companies using SAP should do.
Forwarded from RUSCADASEC news: Кибербезопасность АСУ ТП (Anton Shipulin)
Запись и слайды вебинара Tenable: «Применение процессов управления активами и уязвимостями в технологических системах и сетях» / «Adapting Asset and Vulnerability Management Processes for Operational Technology»
Запись:
https://lookbook.tenable.com/may-8-2019-siemens-ot-replay/od-webinar-adapting-asset-and-vm-mgmt-ot
Запись:
https://lookbook.tenable.com/may-8-2019-siemens-ot-replay/od-webinar-adapting-asset-and-vm-mgmt-ot
Tenable
[Webinar Replay] Adapting Asset & Vulnerability Management Processes for OT
A Content Experience For You
DoD proposal would establish new Senate-confirmed IT officials for Army, Navy, Air Force | Federal News Network
https://federalnewsnetwork.com/defense-main/2019/05/dod-proposal-would-establish-new-senate-confirmed-it-officials-for-army-navy-air-force/
https://federalnewsnetwork.com/defense-main/2019/05/dod-proposal-would-establish-new-senate-confirmed-it-officials-for-army-navy-air-force/
Federal News Network
DoD proposal would establish new Senate-confirmed IT officials for Army, Navy, Air Force | Federal News Network
The tri-service proposal would elevate IT issues in each service’s organizational chart. Its chief advocate is the Department of the Navy, which has already expressed its desire to appoint an…
Lawmakers offer measure requiring cyber, IT training for House | TheHill
https://thehill.com/policy/cybersecurity/443152-lawmakers-offer-measure-requiring-cyber-it-training-for-house
https://thehill.com/policy/cybersecurity/443152-lawmakers-offer-measure-requiring-cyber-it-training-for-house
TheHill
Lawmakers offer measure requiring cyber, IT training for House
Lawmakers on Friday introduced a resolution to require members and employees of the House of Representatives to undergo annual cybersecurity and information technology training.