Hackers Target Defense Contractors' Employees By Posing as Recruiters
Dubbed 'BLINDINGCAN,' the advanced remote access trojan acts as a backdoor when installed on compromised computers.
The United States Cybersecurity and Infrastructure Security Agency (CISA) has published a new report warning companies about a new in-the-wild malware that North Korean hackers are reportedly using to spy on key employees at government contracting companies.
According to the FBI and CISA, North Korean state-sponsored hackers Lazarus Group, also known as Hidden Cobra, are spreading BLINDINGCAN to "gather intelligence surrounding key military and energy technologies."
To achieve this, attackers first identify high-value targets, perform extensive research on their social and professional networks, and then pose as recruiters to send malicious documents loaded with the malware, masquerading as job advertisements and offerings.
The CISA report says that attackers are remotely controlling BLINDINGCAN malware through compromised infrastructure from multiple countries, allowing them to:
- Retrieve information about all installed disks, including the disk type and the amount of free space on the disk
- Create, start, and terminate a new process and its primary thread
- Search, read, write, move, and execute files
- Get and modify file or directory timestamps
- Change the current directory for a process or file
- Delete malware and artifacts associated with the malware from the infected system.
Cybersecurity companies Trend Micro and ClearSky also documented this campaign in a detailed report explaining the whole methodology and concept of the attack.
Click here to read the full article at Thehackernews.com
North Korean Hackers Posing as Recruiters Target Defence Contractors' Employees With BLINDINGCAN Malware
Artificial intelligence does a lot of things extremely well, but just how it does these things often remains unclear — shrouded by what’s come to be known as the “black box” problem. This is particularly true in NLP, where researchers can waste a lot of time trying to figure out what went wrong when their models don’t run as well as expected. Last week, Google Research released a paper tackling this issue with a new open-source analytic platform: the Language Interpretability Tool (LIT).
LIT is a toolkit and browser-based user interface (UI) for NLP model understanding. It has five major functions:
* Supports local explanation, including salience maps, attention, and rich visualizations of model prediction
* Supports aggregate analysis, including metrics, embedding spaces, and flexible slicing
* Allows switching seamlessly between the above to test local hypotheses and validate over a dataset
* Allows new data points to be added at any time and visualizes their effect immediately
* Allows visualizing comparisons between two models or two data points on the same interface
The paper The Language Interpretability Tool: Extensible, Interactive Visualizations and Analysis for NLP Models is on arXiv. The tool has been open-sourced on Github.
Click below for the full article by Syncedreview.com
Google Research released a paper tackling this issue with a new open-source analytic platform: the Language Interpretability Tool (LIT).
User in China reportedly moved $50 billion of cryptocurrency out of country
Over $50 billion of cryptocurrency moved from China-based digital wallets to other parts of the world in the last year, pointing to possibil
Over $50 billion of cryptocurrency moved from China-based digital wallets to other parts of the world in the last year, pointing to possibilities that Chinese investors are transferring more money than allowed out of the country, a new report claims.
Chinese citizens are only allowed to buy up to $50,000 of foreign currency a year at a financial institution. In the past, wealthy citizens have circumvented the limit through foreign investments in real estate and other assets. But the government has cracked down on these methods, according to a report by Chainalysis, a blockchain forensics firm.
Both Tutanota and Protonmail promise to be great for emailing and elite in security. This comparison lets you decide which one is best for your needs.
"Tutanota and ProtonMail are our two top-rated services when it comes to encrypted email. They’re neck and neck in our roundup of the most secure email providers, and it’s easy to see why. Both offer excellent free plans, they’re packed to the brim with features and, above all else, they’ll keep your messages safe.
In this Tutanota vs ProtonMail comparison, though, we’re going to find which is the better option between the two. From security and privacy to ease of use and customer service, we’re going to compare these two encrypted email service point-by-point.
If you want a more in-depth look at each service, be sure to read our ProtonMail review and Tutanota review. Although we’ll touch on most of the talking points here, our reviews go into detail about our experience while using each."
Click here to read the great comparison between the two, by Jacob Roach, the Deputy Editor of Cloudwards.
Trying to pick a secure email provider that's right for you, and already narrowed the choices down to Tutanota vs ProtonMail? Join us as we
Another great & wider comparison between more common, known-to-public(Tutanota, Protonmail, Gmail, Outlook & Yahoo) services was published not long ago by Tutanota's team, and it's available here
The Huawei Mate 10, Mate 10 Pro, P20 and P20 Pro are receiving new updates
Huawei is issuing new updates to the Mate 10, Mate 10 Pro, P20 and P20 Pro. The round of updates brings the older flagships onto the July set of security patches and fixes multiple CVEs.
Some of Huawei's older flagship smartphones are receiving new software updates. The devices in question are the Mate 10, Mate 10 Pro, P20 and P20 Pro. The four devices will not be receiving any future OS upgrades like EMUI 11, but they are good for new security patch updates, at least for the time being.
According to Huawei Central, Huawei is upgrading all four devices to the July 2020 set of security patches. The newer set of August patches have been available for a few weeks, but Huawei generally does not update its devices to the latest patches.
Nonetheless, the July updates fix five critical and nine high-level CVEs. The updates for the four devices should carry the build numbers EMUI 10.0.0.175 or EMUI 10.0.0.176 depending on your device. Huawei Central notes that Huawei has started by upgrading handsets in China, but equivalent updates for other regions should follow shortly.
Huawei is issuing new updates to the Mate 10, Mate 10 Pro, P20 and P20 Pro. The round of updates brings the older flagships onto the July se
Hangar raises $15 million for its venture studio for government technology startups
Josh Mendelsohn, the former Bloomberg digital campaign advisor and venture studio founder, thinks that cash-constrained government agencies
Josh Mendelsohn, the former Bloomberg digital campaign advisor and venture studio founder, thinks that cash-constrained government agencies from the local to the federal level aren’t using technology effectively enough to meet the challenges they face.
“There are so many areas–from healthcare to disaster planning–that are ripe for innovation and new technologies that help to improve the lives and well-being of people and help solve real problems,” said Brian O’Kelley, a New York-based serial entrepreneur and Hangar investor who previously founded AppNexus (and sold it to AT&T for over $1 billion). “With a veteran team that blends deep Silicon Valley and policy experience, Hangar is already making an impact and I’m proud to be supporting their next phase.”
World of Warcraft: Should You Play Classic or Shadowlands?
Gamers who are thinking of getting back into World of Warcraft later this year have a big decision to make between Shadowlands and Classic.
The last year or so have been very interesting in Azeroth and World of Warcraft players have a pretty exciting last quarter of 2020 on the horizon, as well. Not only is Blizzard slated to continue dropping exciting endgame content in WoW Classic, but the retail version of the iconic MMO is also about to release the highly-anticipated Shadowlands expansion sometime before the end of the calendar year.
The onset of COVID-19 caused a rapid growth in demand for video conferencing apps, as school classes and office meetings everywhere went vir
Today Zoom announced support for many of the most popular smart displays, including the Amazon Echo Show, Portal from Facebook, and Google Nest Hub Max. Google confirmed the news with a post of its own, verifying that Zoom will be coming to "Assistant-enabled Smart Displays" in general.
2087
tangentwithtanner
gummygunk
areudirty
izzy806
annaxmalina
discoholicmusic
janainaart