2023 REDSHORT Videos

A Wireless Sensor Network (WSN) is a network comprising of nodes that collaborate to sense certain specified data in their vicinity, enabling environmental control. Because of their varied applications in both civilian and military domains [such as h

An up-and-coming ransomware group, Rhysida, is garnering much attention by intentionally targeting healthcare organizations. In this week's REDSHORT, we'll discuss the short history of this group and the ransomware behind their attacks. In addition,

The worldwide supply chain employs the maritime mode of shipping, 90% along the transportation modes. Red Sky Alliance monthly queries our backend databases, identifying all new data indicators containing Motor Vessel (MV) and Motor Tanker (MT) in th

An up-and-coming ransomware group, Rhysida, is garnering much attention by intentionally targeting healthcare organizations. In this week's REDSHORT, we'll discuss the short history of this group and the ransomware behind their attacks. In addition,

In recent years, there has been a growing debate about the legality and risks of using leaked ransomware data for competitor intelligence. Some people argue that it is perfectly legal, while others believe it is a form of cyber espionage and should b

Discover the intricate world of botnets, exploring their definition, operations, and applications in cybersecurity. We will delve into the methods cybercriminals use to construct and control botnets. Addressing significant challenges, we will highlig

GitHub has issued a safety advisory concerning a social engineering campaign targeting developers attributed to the Lazarus Group. In this week’s REDSHORT, we’ll give a brief overview of the Lazarus Group along with the details of this recent campaig

Fear, uncertainty, and doubt (FUD) is no longer just another fancy blockchain-related term used to influence the public’s opinions. This concept thrives in many fields, turning our attention to the problems of data, system, and operational security.

To make the Machine Learning (ML) model learn the wrong thing, adversaries can target the model’s training data, foundational models, or both. Adversaries exploit this class of vulnerabilities to influence models using data and parameter manipulation

A sophisticated stealer-as-a-ransomware threat dubbed RedEnergy has been spotted in the wild, targeting energy utilities, oil, gas, telecom, and machinery sectors. Following a successful breach, the malicious binary is used as a conduit to set up pe

A new process injection technique named 'Mockingjay' could allow threat actors to bypass EDR (Endpoint Detection and Response) and other security products to execute malicious code on compromised systems stealthily. Tests showed that this remote inje

U.S. government agencies and many other organizations like newspapers, banks, and biotech companies have fallen victim to infiltration via exploits in the file transfer software MOVEit. In this week's REDSHORT, we will review the details of the explo

Or man-in-the-middle (MITM) attacks, cybercriminals use spoofing, hijacking, or eavesdropping techniques to put themselves between a user and services such as a web application to steal financial information or login credentials. Once a criminal has

2014 with $50 billion in seed money, the BRICS nations launched the New Development Bank as an alternative to the World Bank and the International Monetary Fund. Since the start of the Russian war in Ukraine, the BRICS countries have distanced themse

A new stealthy information stealer malware called Bandit Stealer has caught the attention of cybersecurity researchers for its ability to target numerous web browsers and cryptocurrency wallets while evading detection. Bandit establishes a persistent

Countermeasures to protect the Advanced Encryption Standard (AES) against Differential Fault Analysis (DFA) attacks. Discussing the vulnerabilities of physical implementations of AES, proposing signature generator-based approaches, evaluating their e

Progress in ransomware data recovery is being made, particularly with partial encryption techniques. In this week’s REDSHORT, we’ll discuss the nature of “partial encryption” and introduce a recently released Python tool called White Phoenix, designe

Low voltage power is a current technology standard and will power the future Smart cities, not to mention all 16 sectors of our critical global infrastructure and essential resources. The NEC will introduce a new type of circuit called Class 4, which

The nasty Iranian nation-state APT group, Charming Kitten, actively targets multiple US, Europe, Middle East, and Indian victims. The APT group is associated with the Islamic Revolutionary Guard Corps (IRGC). Over the years, the group has utilized va

NEW VULNERABILITY DISCOVERED IN THE SERVICE LOCATION PROTOCOL Details has emerged about a high-severity security vulnerability impacting Service Location Protocol (SLP) that could be weaponized to launch volumetric denial-of-service attacks against t