The BlackCat ransomware operators have demonstrated ongoing adaptation and innovation in their malicious activities, making mitigating their threats challenging for security experts. . BlackCat operators, like Munchkin, revealed updates for propagating their payload across victim networks. They’ve been consistently evolving their ransomware tooling over the past two years. Cybersecurity researchers at Unit 42 of Palo Alto Networks, BlackCat operators recently revealed updates, like Munchkin, for propagating their payload across victim networks. They have been consistently evolving their ransomware tooling over the past two years. Unit 42 researchers obtained a unique instance of Munchkin loaded in a customized Alpine VM, highlighting a growing trend among ransomware threat actors to use VMs for evading security solutions in malware deployment. BlackCat’s evolution over time involved obfuscating configurations and employing command-line parameters for added security. Their latest tool, ‘Munchkin,’ uses a Linux-based OS to run BlackCat on remote machines and encrypt SMB/CIFS shares. The link for this article located at CyberSecurity News is no longer available. . The BlackCat ransomware continues to advance with the introduction of its latest Munchkin tool, designed to enhance its ability to propagate threats within various network environments.. BlackCat Ransomware, Munchkin Tool, Cybersecurity Threats, Malware Propagation. . LinuxSecurity.com Team
"Open source security is arguably getting better, thanks to vendors like Chainguard and industry consortia like the Open Source Security Foundation . But we have a ways to go, and in the meantime, security, as well as other factors, mean that “free as in beer” is never truly free." . Convenience, not cost, drives open source adoption. That’s the primary finding of a new report from The Linux Foundation on the economic value of open source, and it’s a bit counterintuitive. In an interview with Professor Henry Chesbrough, adjunct professor at UC Berkeley and author of the report, he stressed that while cost is a significant perceived benefit of open source, not everyone finds it cheaper. Yet even the “open source costs more” crowd says the benefits of open source trump the costs. The primary advantage? Availability. In other words: speed of development. Freely downloadable code has never been truly free (as in cost). The bits might be free, but there’s a cost to manage those bits. Developers always cost more than the code they write or manage. This may be one reason that when enterprises were asked what they most value in “open source leadership,” they responded with “makes it easy to deploy my preferred open source software in the cloud.” Companies increasingly want the benefits of open source without the expense of managing it themselves. . User-friendliness, rather than price, fuels the growth of open source technologies. This is the key conclusion of a recent study conducted by The Linux Foundation.. Open Source Adoption, Cost vs Convenience, Security Practices, Cloud Software Benefits. . Brittany Day
AI isn’t going to replace us, but it will make it easier to deliver services that keep people safe. . Artificial intelligence has been in the headlines a lot recently. It will help save mankind or usher in the robot apocalypse, depending on which article you read. Security professionals, who have spent the past decade creating connected buildings and bringing digital devices into the homes of millions of consumers, understandably have mixed feelings about A.I. My view of artificial intelligence comes from years of innovating in the security business. With the right approach and controls, I believe A.I. presents an exciting opportunity for our industry. The use of A.I. to better serve and solve problems for our customers means we will move from simply protecting property to proactively ensuring our customers’ well-being. It means we’ll be able to partner with other industries, such as healthcare, and add a range of services to what we already offer. The link for this article located at Security Today is no longer available. . Explore the role of artificial intelligence in strengthening client relationships and optimizing service provision within the security sector.. Artificial Intelligence, Customer Relationships, Security Services. . Brittany Day
Cryptocurrency rumor mongers are likely to be dancing today as Amazon has successfully filed a patent for a Bitcoin-styled Proof-of-Work system. But don’t get ahead of yourself, it doesn’t look like the Seattle-based ecommerce giant will be accepting Bitcoin for payments. . Despite first being filed in December 2016, Amazon’s patent application was granted earlier this week and appears to outline a system that uses Proof-of-Work to prevent distributed denial-of-service (DDoS) attacks. The link for this article located at TheNextWeb is no longer available. . A groundbreaking patent from Amazon promises to transform defenses against DDoS assaults by implementing a proof-of-work mechanism.. DDoS Prevention, Proof-of-Work System, Amazon Patent, Cryptocurrency Security. . LinuxSecurity.com Team
The head of developer advocacy for Paypal and Braintree, Jonathan Leblanc, has an idea that will seem absurd to some, innovative to others and terrifying to still others. The executive of the multi-billion dollar eBay subsidiary suggests in a recent presentation called . fingerprint passwordsHis premise is that user behavior has historically proven the system of password authentication to be inadequate. Users always seem to opt for easy passwords that can be cracked by brute force with ease, and this is not a problem that will lessen with the advancement of technology. The link for this article located at hacked is no longer available. . Sophia Turner advocates for replacing traditional logins with facial recognition, addressing security flaws linked to human habits.. Biometric Authentication, User Authentication, Security Innovation. . LinuxSecurity.com Team
The rush of businesses to move their operations to the cloud is creating a slipstream that's pulling security services into the nimbus. . "People have become more comfortable now with the cloud so they're feeling more comfortable leveraging certain cloud services for security," said Brian Contos, CISO for Blue Coat, a web filter appliance company. The link for this article located at Network World is no longer available. . 'People have become more comfortable now with the cloud so they're feeling more comfortable leveragi. businesses, their, operations, cloud, creating, slipstream, that's, pulling. . Dave Wreski
There are more than 450 expo vendors showing wares or hawking programs at the 20th annual RSA Conference now underway in San Francisco. In the weeks leading up to the conference talked with nearly 25 vendors about the announcements they are making today. . From military grade USB thumb drive encryption to astoundingly inexpensive two-factor tokens to cloud security offerings I The link for this article located at eWeek is no longer available. . Explore innovations presented at the Cybersecurity Summit, ranging from hardware firewalls to identity management systems.. RSA Conference, Encryption Solutions, Security Innovations, Authentication Products. . Anthony Pell
A researcher is working on technology he hopes will be able to control RFID tags and protect private information. "We are building our own RFID cards and adding features to them to make it visible and noticeable when someone is accessing the information," Nicolai Marquardt, a Ph.D. student at the University of Calgary said during the Computer Human Interaction conference in Atlanta Wednesday. . He said that his project can also make it possible for users to control when the information on the card is being accessed. With RFID being embedded into everyday items like passports, credit cards and transit passes, security becomes a concern with the always-on technology. Marquardt is working with Microsoft Research in the U.K. on the project and has four distinct types of RFID controllers. The first group gives the user direct feedback. There's one that lights up, one that vibrates and one that makes a sound when the tag is being accessed. The next group has controllable tags. One has a button that needs to be pressed before the RFID becomes active. Another one is touch sensitive so, for example, someone needs to be holding the tag in order to read the information on it. The third group of tags has sensing properties. One is light sensitive, so data can't be accessed when the card is in a pocket. Another is tilt sensitive so it can only be accessed when pressed flat against a reader. The link for this article located at IT World is no longer available. . He said that his project can also make it possible for users to control when the information on the . researcher, working, technology, hopes, control, protect, private. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.