APTs Archives - AZGAD WEBSITE SECURITY BLOG

Nation-State Attackers Actively Target COVID-19 Vaccine-Makers

2020-11-13 Tara Seals

Three major APTs are involved in ongoing compromises at pharma and clinical organizations involved in COVID-19 research, Microsoft says.

alert APTs chaining CISA Citrix NetScaler Critical Infrastructure CVE-2018-13379 CVE-2019-11510 CVE-2019-19781 CVE-2020-1472 CVE-2020-15505 CVE-2020-2021 CVE-2020-5902 election security election systems exploit chain F5 BIG-IP FBI government attacks Microsoft mobileiron Palo Alto Networks pulse secure VPN Vulnerabilities warning Web Security zerologon

Election Systems Under Attack via Microsoft Zerologon Exploits

2020-10-13 Lindsey O'Donnell

Cybercriminals are chaining Microsoft’s Zerologon flaw with other exploits in order to infiltrate government systems, putting election systems at risk, a new CISA and FBI advisory warns.

APTs Black Hat black hat 2020 BlackBerry chinese collaboration cyberespionage kevin livelli linux Malware Malware analysis malware stack rootkit session State sponsored Winnti

Black Hat 2020: Linux Spyware Stack Ties Together 5 Chinese APTs

2020-08-06 Tara Seals backdoor

The groups, all tied to the Winnti supply-chain specialist gang, were seen using the same Linux rootkit and backdoor combo.

APTs Black Hat black hat 2020 BlackBerry chinese collaboration cyberespionage kevin livelli linux Malware Malware analysis malware stack rootkit session State sponsored Winnti

Black Hat 2020: Linux Spyware Stack Ties Together 5 Chinese APTs

2020-08-06 Tara Seals backdoor

The groups, all tied to the Winnti supply-chain specialist gang, were seen using the same Linux rootkit and backdoor combo.

APTs Attackers Authentication cisa alert critical vulnerability CVE-2020-2021 Department of Defense enterprise foreign attackers nation state Palo Alto Networks patch SAML security bug threat actors VPN appliances Vulnerabilities Web Security

CISA: Nation-State Attackers Likely to Exploit Palo Alto Networks Bug

2020-06-30 Elizabeth Montalbano firewall

An authentication-bypass vulnerability allows attackers to access network assets without credentials when SAML is enabled on certain firewalls and enterprise VPNs.

CISA: Nation-State Attackers Likely to Exploit Palo Alto Networks Bug

2020-06-30 Elizabeth Montalbano firewall

An authentication-bypass vulnerability allows attackers to access network assets without credentials when SAML is enabled on certain firewalls and enterprise VPNs.