Saoud Khalifah

 X-Labs team’s research seems to have discovered and identified basic ransomware targeting Turkish businesses. The attack vector initiates through a PDF attachment disseminated via suspicious emails originating from the "internet[.]ru" domain. The embedded links within the PDF facilitate the download of a subsequent stage exe payload upon user interaction. It encrypts files with “.shadowroot” extension. Currently, ransomware is actively targeting numerous businesses worldwide, including those in the healthcare and online shopping sectors. https://lnkd.in/dUNtKRkj #healthcare #cybersecurity #ransomware

1

Strong words are a weak shield against explosions. But we need to talk about supply chain vulnerabilities and national security. #SupplyChain #SupplyChainSecurity #NationalSecurity #Cybersecurity #Terrorism #Lebanon #CellPhones #CriticalInfrastructure

2

Two of my keynotes are now viewable online: 👉 Blackhat MEA Keynote, November 2023: "Developer Centric Security" https://lnkd.in/gZdqhyn7 👉 Bsides SF Keynote, May 2024: "Navigating the AI frontier" https://lnkd.in/gfR3WPY4 The more I think about it, the more pronounced developer-centric security is in the AI age, especially as we embrace Agentic AI. Agentic AI applications have striking similarities to micro-services applications. The way we instrument code for observability, reliability, and production-system security is especially critical. Yet, instrumenting AI and AI agent applications is very different from traditional software. You will hear more from me on the topic of securing agentic AI. Excited and grateful that I am in the position to learn and innovate with Rain Capital and my network of #innovators. Nir Livneh Eitan Goldstein Andrew Smyth Tim McAdam Sid Trivedi Nancy Wang Ankur Shah Joe Sullivan Galina Antova

72

3 Comments

🔒 Secure Talk Podcast: Episode 171 ➤ Hacking the Human OS: Insights for Social Engineering In this episode, we explore the art of human hacking. Join us as our guest speaker takes us on a journey through security and computer science, including pivotal incidents, pioneering social engineering frameworks, and collaborations with agencies like @MI5 and the Federal Bureau of Investigation (FBI). Gain insights into ego suspension, nonverbal communication, and defense strategies against social engineering, emphasizing empathy, education, and technology in cybersecurity. ➤ Host Justin Beals of Strike Graph ➤ Guest Speaker Christopher Hadnagy of Social-Engineer, LLC Author of Social Engineering: The Science of Human Hacking (link in comments) ➤ Check the comments below for links to listen in on the Secure Talk website, iTunes, Spotify and SoundCloud. #cybersecurity #humanhacking #socialengeineering

23

3 Comments

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has imposed sanctions on four Iranian individuals and two front companies for their involvement in cyberattacks against the U.S. government, defense contractors, and private companies. Among the sanctioned cybercriminals, two targeted U.S. organizations while employed by Mehrsam Andisheh Saz Nik (MASN). Another individual targeted the Treasury Department and other U.S. entities using spear phishing and social engineering operations. The fourth individual was linked to attacks against U.S. organizations coordinated by MASN, Dadeh Afzar Arman (DAA), and other Iranian Armed Forces services. OFAC's sanctions aim to deter future attacks by these individuals and entities. Read more about the sanctions below https://lnkd.in/eDCHgBsG

1