CISA Archives - s0x • Austin Managed IT Services

18 Dec, 2020

VMware Flaw a Vector in SolarWinds Breach?

Cybersecurity, VMware APT 29, Ars Technica, CISA, Cozy Bear, Cyber Security and Infrastructure Security Agency, Data Breaches, Duo, FSB, Microsoft Outlook Web App, New York Times, nsa, SAML token compromise, Security Assertion Markup Language, The Coming Storm, U.S. National Security Agency, VMware, Volexity, washington post

U.S. government cybersecurity agencies warned this week that the attackers behind the widespread hacking spree stemming from the compromise at network software firm SolarWinds used weaknesses in other, non-SolarWinds products to attack high-value targets. According to sources, among those was a flaw in software virtualization platform VMware, which the U.S. National Security Agency (NSA) warned on Dec. 7 was being used by Russian hackers to impersonate authorized users on victim networks. …

15 Dec, 2020

SolarWinds Hack Could Affect 18K Customers

Cybersecurity Alan Paller, Andrew Morris, Center for Strategic and International Studies, CISA, Cybersecurity and Infrastructure Security Agency, Data Breaches, FireEye, GreyNoise Intelligence, James Lewis, microsoft, Orion software, SANS Institute, SolarWinds breach, U.S. Securities and Exchange Commission, Vinoth Kumar

18 Nov, 2020

Trump Fires Security Chief Christopher Krebs

Cybersecurity A Little Sunshine, Christopher Krebs, CISA, Cybersecurity and Infrastructure Security Agency, President Trump, Rumor Control, Sen. Angus King, Sen. Richard Burr, U.S. Department of Homeland Security, Y2K

21 Aug, 2020

FBI, CISA Echo Warnings on ‘Vishing’ Threat

Cybersecurity CISA, COVID-19, fbi, Latest Warnings, Security Tools, The Coming Storm, vishing

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued a joint alert to warn about the growing threat from voice phishing or “vishing” attacks targeting companies. The advisory came less than 24 hours after KrebsOnSecurity published an in-depth look at a crime group offering a service that people can hire to steal VPN credentials and other sensitive data from employees working remotely during the Coronavirus pandemic. …

27 Nov, 2019

It’s Way Too Easy to Get a .gov Domain Name

Cybersecurity CISA, Cybersecurity and Infrastructure Security Agency, DOTGOV Bill, dotgov.gov, exeterri.gov, John Levine, The Coming Storm, town.exeter.ri.us, U.S. Department of Homeland Security, U.S. General Services Administration, Web Fraud 2.0

Many readers probably believe they can trust links and emails coming from U.S. federal government domain names, or else assume there are at least more stringent verification requirements involved in obtaining a .gov domain versus a commercial one ending in .com or .org. But a recent experience suggests this trust may be severely misplaced, and that it is relatively straightforward for anyone to obtain their very own .gov domain. …

s0x • Austin Managed IT Services