Fundamentals First

A sponsored state cyber-attack is most likely behind the attack that disrupted the live broadcast on Australia’s Channel Nine TV network on Sunday this week.

The broadcaster discovered that it was not able to go on air for its normal Sunday morning programmes, forcing it to tweet “A cyber-attack on our systems has disrupted live broadcasts today however, we have put processes in place to ensure we’re able to resume our normal broadcast schedule.”

The attack had not disrupted Channel Nine’s email or website.

Alicia Loxley, the Nine Afternoon News Melbourne presenter updated viewers, saying “Cyber hackers have targeted Channel Nine in a massive ransomware attack bringing down its network Australia-wide…

Continue Reading...

https://fundamentalsfirst.co.uk/2021/03/30/cyber-attack-disrupts-australian-channel-nine/?utm_source=facebook.com&utm_medium=social&utm_campaign=ChannelNine30032021

The European Banking Authority has joined over 30,000 other government and commercial organisations that have been known to be hacked due to four exploits found in Microsoft’s Exchange Server software. The hack seems to be rapidly growing in the wild, with estimates suggesting at least 60,000 plus victims globally, including small to medium sized businesses. With its rapid spread globally, it is assumed that other hacking groups are now exploiting the same vulnerabilities.

The unknown Microsoft vulnerabilities have been exploited in attacks since January. The Microsoft Threat Intelligence Center (MSTIC) has accused the Chinese state-sponsored cyber hacking group known as Hafnium.

The attack gains access to Exchange servers using unknown vulnerabilities or stolen credentials. It then creates a web shell to gain control of the server and allows access to virtual remote servers. From here, Malware can be installed, and data can be stolen.

If you’re running Exchange servers on-premise and you haven’t patched them recently, there’s a very likely chance that your organisation is already compromised. The hack does not affect Exchange Online.

Read the whole article - https://fundamentalsfirst.co.uk/2021/03/09/outsourced-soc-fight-against-microsoft-hack/?utm_source=facebook.com&utm_medium=social&utm_campaign=MSHack09032021

A report detailing the Operational Technology Cyber Attack on India’s power grid by Chinese state-sponsored threat actors ‘Red Echo’, has sparked accusations and denials this week.

On October 12th 2020, grid failure in Mumbai resulted in a 2 hour power outage, shutting business and stopping national transport. The report by the US-based Recorded Futures released on Sunday, through large-scale automated network traffic analytics and security analysis, discovered that large increases in suspicious targeted intrusion activity had been found.

The ministry of power (POSOCO) officially stated “There is no impact on any of the functionalities carried out by POSOCO due to the referred threat. No data breach/ data loss has been detected due to these incidents.”

China has official denied responsibility, stating it is 'firmly opposed' to such irresponsible and ill-intentioned practices.

Cyberwarfare is now very much a real thing. State-organised and coordinated hacking that takes down national services affects us all, and can have devastating consequences.

With state backing seemingly common, cyber attacks are becoming increasingly well funded, driving more and more complexity and potential damage.

Cyber security is an ongoing fight against unknown actors. With more state backing, these attacks are becoming increasingly well funded, driving more and more complexity and potential damage. If you are running a production plant and want an Operational Technology Cyber Security Assessment of your estate, get in contact with Fundamentals First to start the journey of mitigating your cyber risk.

https://fundamentalsfirst.co.uk/cyber-security-solutions/?utm_source=facebook.com&utm_medium=social&utm_campaign=OTIndia020221

The cyber security company SonicWall has officially stated it was the victim of a coordinated attack on its internal systems.

The networking device maker said on Friday night that it is investigating a security breach that looked to be a part of a “coordinated attack” by “highly sophisticated” hackers. This is over a period where the company has seen a dramatic surge in cyber attacks on organisations providing critical infrastructure to businesses and governments. This increase includes not only traditional corporate technology, but also manufacturing and supply chain infrastructure within production plants and laboratories.

The breach looks to centre around the companies Secure Mobile Access 100 series.

With the increase in cyber attacks across all industries, and on cyber security firms themselves, multiple security solutions and a pro-active threat hunting team is the only way to continually protect an organisation.

If you are concerned about your organisations security, get in contact to discover how our Security Operations Centre can protect your endpoints, proactively monitor your network, and proactively hunt vulnerabilities.

https://fundamentalsfirst.co.uk/security-operations-centre/advanced-soc/?utm_source=facebook.com&utm_medium=social&utm_campaign=SonicWall250121