Security Alerts & News
by Tymoteusz A. Góral

History
#1111 The Dropping Elephant – aggressive cyber-espionage in the Asian region
Dropping Elephant (also known as “Chinastrats” and “Patchwork“) is a relatively new threat actor that is targeting a variety of high profile diplomatic and economic targets using a custom set of attack tools. Its victims are all involved with China’s foreign relations in some way, and are generally caught through spear-phishing or watering hole attacks.

Overall, the activities of this actor show that low investment and ready-made offensive toolsets can be very effective when combined with high quality social engineering. We have seen more such open source toolset dependency with meterpreter and BeEF, and expect to see this trend continue.
Read more
#1119 Millions of Xiaomi phones at risk of remotely installed malware
#1118 IoT medical devices: A prescription for disaster
#1117 Executive's guide to mobile security (free ebook)
#1116 HTTPS is not a magic bullet for Web security
#1115 Time management tips: How to create meetings that work
#1114 The state of mobile device security: Android vs. iOS
#1113 Industrial cybersecurity threat landscape
#1112 How Poland’s intrusive new spying law could bug world leaders at NATO summit
#1111 The Dropping Elephant – aggressive cyber-espionage in the Asian region
#1110 DroidJack uses side-load. It's super effective! Backdoored Pokemon GO Android app found
#1109 CISSP certification: Are multiple choice tests the best way to hire infosec pros?
History
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12