Geek-Guy.com

Category: cyberattack

cyberattack, Don't miss, Endpoint, Global Security News, Hot stuff, malware, News

Why a decade-old EnCase driver still works as an EDR killer

Attackers are leaning on a new EDR killer malware that can shut down 59 widely used endpoint security products by misusing a kernel driver that once shipped with Guidance Software’s EnCase digital forensics tool, Huntress researchers warn. This particular driver is legitimate but its certificate expired and was revoked more than ten years ago. Even…

Read more →

cyberattack, Cybersecurity, Global Security News, Government, Threats

CISA warns of imminent risk posed by thousands of F5 products in federal agencies

Federal cyber authorities issued an emergency directive Wednesday requiring federal agencies to identify and apply security updates to F5 devices after the cybersecurity vendor said a nation-state attacker had long-term, persistent access to its systems. The order, which mandates federal civilian executive branch agencies take action by Oct. 22, marked the second emergency directive issued…

Read more →

cyberattack, Cybersecurity, Exploits, Global Security News, Hardware, Research, Security Bloggers Network, Threats & Breaches

Hacking the Hardware Brains of Computers is the Ultimate Cyberattack

Compromising the hardware layer, especially the CPU, is the Holy Grail of cyberattacks. Recent work by Christiaan Beek, a leading cybersecurity researcher at Rapid7, into developing a ransomware proof-of-concept that infects at the hardware layer, inside the CPU, is truly scary. The research demonstrates just how real this threat could become. He was able to…

Read more →

cyberattack, Cybersecurity, Global Security News, hack, SBN News, Security Bloggers Network, Threats & Breaches

Cyberattacks on Critical Infrastructures Makes Us Very Vulnerable

  Many don’t realize that cyberattacks against Critical Infrastructure sectors, can cause more than an inconvenience of a temporary power outage.   Critical Infrastructures are a favorite of aggressive Nation State cyber threats.  In addition to communications disruptions, power outages, and healthcare billing, these attacks can also seek to disrupt food distribution.  The result –…

Read more →

APT, Blog, cyberattack, Cybersecurity, Global Security News, Security Bloggers Network, Threat analysis, Threats & Breaches

NSFOCUS APT Monthly Briefing – March 2025

Regional APT Threat Situation Overview In March 2025, the global threat hunting system of NSFOCUS Fuying Laboratory discovered a total of 19 APT attack activities. These activities were mainly distributed in South Asia, East Asia, Eastern Europe, and South America, as shown in the following figure. In terms of group activity, the most active APT…

Read more →

Asia Pacific, china, cyberattack, Cyberlaw, espionage, Global Security News, hacking, law enforcement, Security Bloggers Network, Threats & Breaches, Uncategorized

Silk Typhoon Hackers Indicted

Lots of interesting details in the story: The US Department of Justice on Wednesday announced the indictment of 12 Chinese individuals accused of more than a decade of hacker intrusions around the world, including eight staffers for the contractor i-Soon, two officials at China’s Ministry of Public Security who allegedly worked with them, and two…

Read more →

cyberattack, Cybersecurity, Global IT News, Global Security News, hacking, Security, Space

Polish space agency says it’s investigating a cyberattack

Poland’s space agency (POLSA) says it is working to restore services following a cybersecurity incident. POLSA, the Polish government agency responsible for the country’s space activities, said in a post on X that it had “immediately disconnected” its network from the internet after detecting the cyberattack on Sunday. POLSA’s website remains offline at the time…

Read more →

cyberattack, Cybersecurity, Global IT News, Global Security News, Security

Engineering giant Smiths Group says hackers accessed its systems during cyberattack

U.K.-based engineering giant Smiths Group has confirmed a cybersecurity incident involving “unauthorized access” to its systems. The London-listed company, which operates across multiple sectors including energy, security, aerospace and defense, said Tuesday that it is currently “managing” the incident. The company said it isolated affected systems and activated its business continuity plans, implying a disruptive…

Read more →