Tag: cyber defense
-
The 11-Day Head Start: How “Internet Noise” Predicts the Next Major Zero-Day Breach
Subtle fluctuations in internet activity can serve as premonitory indicators of severe vulnerabilities long before their public disclosure. A nascent report by GreyNoise reveals that adversaries frequently initiate aggressive scanning and reconnaissance of infrastructure days, or even weeks, prior to official security advisories—signals that can be preemptively discerned and tracked. The analysis encompassed 103 days…
-
COMmander: Lightweight C# Tool Boosts Defensive RPC/COM Telemetry
COMmander is a tool written in C# that can enrich defensive telemetry around RPC and COM. For a detailed blog post on the development of the tool and ruleset, see Jacob Acuna’s blog post COMmander leverages the Microsoft-Windows-RPC ETW provider to tap into low level RPC events. This provides detailed RPC-related events on the system that can provide defenders…
-
Poland Dodges Major European Airport Cyberattack: Minister Assures Infrastructure Safety
Poland’s Deputy Prime Minister and Minister of Digitalization, Krzysztof Gawkowski, commented on the aftermath of the major disruption caused by a cyberattack on European airports, assuring that Polish infrastructure remained unaffected. In an interview, he noted that on Saturday the attack crippled systems supporting airport operations in Brussels, Berlin, and London, yet Poland was spared…
-
Scoring Insecurity: Study Reveals Chaos in Vulnerability Ranking Systems
Against the backdrop of the rapidly growing number of vulnerabilities confronting companies worldwide, researchers from the Rochester Institute of Technology, the University of Hawaiʻi, and Leidos have conducted the most extensive comparative study to date of four of the most widely used public vulnerability scoring systems—CVSS, EPSS, SSVC, and the Exploitability Index. The authors analyzed…
-
Pentagon, NSA plan to use AI for cyber defense
The United States Department of Defense’s newly formed Joint Artificial Intelligence Center (JAIC) is creating a framework for the US military’s cybersecurity data, aiming to lay the foundation for future artificial intelligence (AI) network defense systems. JAIC head Jack Shanahan said the center will work with the National Security Agency, the US Cyber Command and…