Carlos Lopes

📢 Ever wondered how a hardware-based attack on a bank looks like? We want to highlight a significant development in the realm of cybersecurity and law enforcement. The recent second phase of Operation Firewall by the Civil Police of Rio de Janeiro resulted in the arrest of three key individuals involved in a sophisticated bank fraud scheme. This operation revealed a disturbing trend: the use of hardware implants to infiltrate bank systems. The criminal group installed devices within bank networks to steal customer data, leading to a loss of R$ 40 million nationwide. This method demonstrates the growing threat and lucrative nature of hardware-based attacks. The use of hardware implants as an attack vector underscores the urgent need for robust cybersecurity measures that go beyond software solutions. This case serves as a crucial reminder for organizations to enhance their security frameworks to include hardware threat detection and prevention strategies. Banco do Brasil's role in identifying these irregularities and initiating the investigation was pivotal. Kudos to the Civil Police and all involved in this significant achievement in combating financial crimes. Let's continue to evolve our cybersecurity practices to safeguard against emerging threats. Contact us to learn how you can detect rogue devices in your network. https://lnkd.in/dJAXCk-N #CyberSecurity #HardwareAttacks #BankingFraud #FraudPrevention #LawEnforcement #RioDeJaneiro #OperationFirewall #SeeWhatYouveBeenMissing #Sepio #ZeroTrustHardwareAccess #ITAU #Bradesco #Santander #BancodoBrasil #CaixaEconômicaFederal

54

3 Comments

We have four articles dedicated to threat intelligence. If you are relatively new to this area we recommend checking Cyber Threat Intelligence - Overview. https://lnkd.in/daeUck8w #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

5

We open the issue with an interview with Magda Chelly, who will tell you about how she got started in cybersecurity and how she got to the top. https://lnkd.in/d2-QwCpr #infosec #cybersecurity #pentest #pentesting #hacking #hackers #opensource

2

2024 OWASP Global AppSec is coming to Lisbon this June! Register now for this event designed for appsec professionals with unmatched networking and growth opportunities Paulo Silva , security researcher for Char49 is leading a training on June 26 focused on "The Dark Side of APIs - The Attacker Way to Protect Software" Get you tickets for the 2024 OWASP Global AppSec Lisbon Conference and Training today by following the link below! https://lnkd.in/eqKkzrUt #owasp #appsec #AI #cybersecurity #lisbon #portugal #hacking #networking #threatmodeling #conference #training #infosec #cybersecurityevents

57

A new phishing campaign is deploying SambaSpy malware, targeting users in Italy. Learn how this sophisticated malware steals credentials and evades detection, with future expansions to Brazil and Spain. #CyberSecurity #PhishingScam #MalwareAlert #SambaSpy #BankingTrojan #CyberThreats #ItalySecurity #BrazilianHackers

3

⏪ In case you've missed this on socradar.io: Top 10 Breach and Attack Simulation (BAS) Software in 2024 🔐 Breach and Attack Simulation (#BAS) software is becoming a critical tool in cybersecurity strategies. Our latest article highlights the Top 10 BAS tools of 2024, offering insights into how these platforms can help organizations identify vulnerabilities, simulate real-world attacks, and improve overall security posture. Learn how you can stay ahead of cyber threats and ensure your defenses are always up to date! ➡️ Read again on our Medium: https://lnkd.in/dt9_pywf #Cybersecurity #ThreatIntelligence #SecurityStrategy #CyberDefense

8

🔐 Flashpoint, in partnership with Onapsis, reveals crucial threat intelligence on escalating cyber threats targeting SAP applications. Our new joint analysis exposes the sophisticated methods employed by cybercriminal and state-sponsored groups, emphasizing their increased aggression in exploiting SAP vulnerabilities for financial gain, espionage, and sabotage: 🔸 Increased aggression from cybercriminal groups and state actors in exploiting SAP vulnerabilities. 🔸 Trends in ransomware attacks specifically targeting SAP data and applications, outlining how these threats have evolved to become more dangerous. 🔸 Vital recommendations on safeguarding your SAP environments against these heightened threats. 🌐 Join us for a live session on April 24th with industry experts Juan Perez-Etchegoyen and Christian Rencken, as they delve deeper into our findings and guide you on how to bolster your defenses: https://lnkd.in/djpmw7pj 📥 Download the full report now to equip yourself with the knowledge to mitigate these threats and secure your critical business applications: https://lnkd.in/dHW2xkiK #ThreatIntelligence #SAPSecurity

25

1 Comment

Nestle (Brazil) Hit by Data Breach, Employee Information Exposed: https://lnkd.in/dz8iH6dJ #databreach, #informationsecurity, #cybersecurity, #Nestle, #Brazil, #employee #privacy, #hacktivism, #informationleak, #securityawareness #ethicalempire

4

Unlock your hacking potential at Black Hat Europe with these two cutting-edge courses: 🔸 9-10 December: Pragmatic API Exploitation 🔸 9-12 December: Tactical Hacking Essentials Ready to sharpen your skills and stay ahead in cybersecurity? Enrol: https://ow.ly/sjEO50Tt4wn #SensPostTraining #BlackHatEurope #BHEU #Cybersecurity #HackingTraining

13

Black Arrow Cyber Threat Intelligence Briefing 10 May 2024: -China Suspected of Hacking MoD Through Its Payroll Provider -Security Tools Fail to Translate Risks for Executives -Gang Accused of MGM Hack Shifts Attacks to Finance Sector -Are SMEs Paving the Way for Cyber Attacks on Larger Companies? -Misconfigurations Drive 80% of Security Exposure, Report Finds -Only 45% of Organisations Employ MFA Protections  -You Cannot Protect What You Do Not Know You Have, as Criminals are Exploiting Vulnerabilities Faster Than Ever -The Rise and Stealth of The Socially Engineered Insider -Over 70% of Staff Use AI At Work, But Only 30% of European Organisations Provide AI Training -Don't Be the Weakest Link – You and Your Team's Crucial Role in Cyber Security -Ransomware Activity Thrives, Despite Law enforcement Efforts -NATO Warns of Russian Hybrid Warfare #blackarrowcyber #cyber #threatintelligence #threatreport #opensourceintelligence #riskmanagement #grc https://lnkd.in/e3VG-kR4

3

What is Vulnerability? https://lnkd.in/dhpwANU What is Vulnerability Management? https://lnkd.in/d_p26iK What is CVE's? https://lnkd.in/d_RJpsM What is CVSS? https://lnkd.in/dedTc7H

2

🚨 #CISA issued an alert highlighting #Oracle’s Critical Patch Update Advisory for July 2024, urging users and administrators to review and apply necessary updates to prevent potential system takeovers. A particularly critical #vulnerability fixed in the update, CVE-2024-21181 (CVSS: 9.8), affects Oracle #WebLogic Server Core. It is easily exploitable without #authentication and allows attackers with #network access to compromise the server via T3 and IIOP protocols. 👉 Affected supported versions include 12.2.1.4.0 and 14.1.1.0.0. Successful exploitations could result in full server control and facilitate additional malicious actions. 💡👀 If you can’t patch CVE-2024-21181 immediately, restrict T3 protocol access to trusted sources or disable it. Similarly, disable the IIOP protocol unless required. 🛡️ Stay ahead of malicious actors. Follow CVE trends and exploitation news, and gain critical insights with SOCRadar’s Vulnerability Intelligence module:  https://lnkd.in/daaGe_Jc #CyberSecurity #OracleWebLogic #PatchNow #VulnerabilityManagement #VulnerabilityIntelligence

7

🌟 Feature Highlight 🌟 - The new Windows Event Log collection feature The new Windows Event Log collection feature in Binalyze AIR v4.23 offers advanced flexibility for digital forensics and incident response. The video illustrates how to create customized acquisition profiles to collect and analyze specific event logs, simplifying evidence gathering in investigations. Key features include: ✅ Event Log Customization: Choose specific event channels and IDs. ✅ Collection Parameters: Define how many records to collect or set specific date ranges for logs. ✅ Predefined Event IDs: Select from a curated list of over 200 Digital Forensics Incident Response (DFIR) event IDs or manually input your own. These configurations streamline investigations by focusing on the most relevant logs and eliminating unnecessary data, all within the Investigation Hub of AIR. Try today with a Binalyze AIR 14-day FREE trial - https://lnkd.in/exk98D5Y

14

The latest update for #Elastic includes "Guiding your organization with the 2024 Elastic Global Threat Report" and "The 2024 Elastic Global Threat Report: Forecasts and recommendations". #Cybersecurity https://lnkd.in/dDeWNt6c

1