Cyberattack suspected of causing rocket-attack false alarms in Israel. Risk surface assessments. Fitness app’s geolocation feature may be a privacy and security risk.

ToddyCat APT is lively in European and Asian networks.

Kaspersky describes ToddyCat, a hitherto unremarked APT lively towards “high-profile” European and Asian targets. The menace actor works towards weak Microsoft Trade situations, has been lively since late 2020, and deploys at the least two distinctive instruments, the Samurai backdoor and the Ninja Trojan. It is not clear whom ToddyCat is working for, and its disparate goal listing affords few apparent recommendations. The menace actor is claimed to have been lively towards Taiwan, Vietnam, Afghanistan, India, Iran, Malaysia, Pakistan, Russia, Slovakia, Thailand, the UK, Kyrgyzstan, Uzbekistan, and Indonesia.

ICEFALL ICS vulnerabilities described, with recommendation and reactions.

Researchers at Forescout describe “OT:ICEFALL,” which they characterize as “a set of 56 vulnerabilities affecting units from 10 OT distributors.” Forescout quite sternly calls the affected techniques “insecure by design,” and divides the vulnerabilities into 5 classes:

Comments

0 comments

Leave a comment

Your email address will not be published. Required fields are marked *