Researchers track hacking campaign targeting Japanese organizations / FuboTV was hacked during the World Cup / NSA warns of 5G slicing risks

Plus: Protect AI raises $13.5M funding round to provide tailored security for artificial intelligence systems

Inside.com Part of   Network December 15, 2022

Presented by

Researchers have tracked a China-based hacking campaign targeting Japanese political organizations. The campaign is being run by a group known as MirrorFace. More: The hacker group is sending phishing emails that contain infected files. If the victims open the files, it enables the hackers to take screenshots, log keystrokes, extract files, and execute commands. This specific hacking campaign targeted political entities using the then-upcoming House of Councillors election to disrupt the political scene in Japan. Named LoadInfo, the campaign was first tracked on November 2022. MirrorFace shares tactics with another threat actor tracked as APT10. The latter is a China-based threat actor known for having breached important institutions such as the U.S. Navy, among other organizations in the U.K., Japan, Brazil, France, Switzerland, etc.

FuboTV stated that its World Cup streaming outage during the France-Morocco match was caused by a cyberattack that came from an unknown threat actor. Users were unable to log in to the service when the match started. More: On Dec. 14, the day of the Qatar 2022 World Cup semi-final between France and Morocco, users were unable to log in to the FuboTV service. The company claims that once it detected the attack, it worked to restore service for subscribers on the same day. Even though the streaming company was able to recover within a few hours, researchers believe that the hacking campaign was a breach of their network or servers. Typically this type of attack leaves companies unable to operate for a few days. The company claims that it has reported the incident to law authorities and is working with cybersecurity company Mandiant.

A message from SECURITY COMPASS The only secure developer training that is accredited by (ISC)²  Our role-based, language-specific, secure developer training meets developers where they are in their knowledge and learning style to ensure they successfully develop and apply secure coding skills. Go beyond secure coding training. Retain talent, remain competitive, and stay compliant. We offer over 49 courses covering topics including: ● Defending AWS, .NET, Angular, Java, and more ● DevSecOps Fundamentals and DevSecOps for Managers ● Defending Containers, Kubernetes, Docker ● Secure Software Requirements, Design, Testing Explore language-specific, role-based, (ISC)² accredited secure developer training.  Visit our page to browse our curriculum, try a free course, or speak to the team. Browse our curriculum

The NSA has warned of the risks to 5G slicing in a new joint statement released with CISA. DDoS, MiTM, and configuration attacks were highlighted as the most dangerous vectors. More: Network slicing allows operators to bring together several network attributes or components in order to be more efficient at providing different services. While the technology is beneficial for the consumer, it also leaves a lot of space for threat actors to take advantage of. The report mentions several threat vectors, such as DDoS, man-in-the-middle attacks, configuration attacks, penetration attacks, user identity attacks, etc. The security agencies stressed the need that federal agencies and organizations need to adopt zero-trust architecture in order to ensure their safety from these hacking campaigns.

Protect AI has raised a $13.5M funding round to provide tailored security for artificial intelligence systems. The company claims it offers the first security tool for ML Notebooks. More: Jupyter Notebooks are tools for data scientists to explore data, create models, evaluate experiments, and share results with their peers. The notebooks contain live code, visualizations, data, and text, all of which expose them to real-time security risks. Protect AI aims to help protect these devices by providing risk detection services through its flagship product, named NB Defense. NB Defense will work across MLOps tools and is currently free to use. The round was co-led by successful Acrew Capital, boldstart ventures, Knollwood Capital, Pelion Ventures, Avisio Ventures, etc.

FireTail has raised $5M to boost its product that enables companies to embed security technology within APIs. Paladin Capital Group led the funding round. More: The company enables organizations to maintain visibility over their APIs, monitor for threats, and prevent breaches with an end-to-end focus on the application layer of cloud-native applications. FireTail claims it has secured hundreds of millions of APIs for clients across North America, Europe, and Asia-Pacific. Zscaler, General Advance, Secure Octane, Ely Kahn, Mark Arena, and Josh Lospinoso also participated in the funding round. FireTail is headquartered in northern Virginia, with additional offices in Dublin, Ireland.

Quick Hits: Okta achieves hiring goals to support business growth using Greenhouse Recruiting. Find out how they win the best talent.* The vast majority of cyber-attacks over the past year have used TLS/SSL encryption to hide their tracks, according to a new report. A hacker group has uploaded over 144,000 malicious open-source packages to three repositories. A malware named MoneyMonger is using the Flutter language to hide its malicious code. Ready to streamline security and accelerate growth? Check out Vanta’s demo-on-demand for an insider look at how scaling startups get compliant quickly.* *This is a sponsored post.

Upcoming events at Inside: December 31 - AMA with Synthesis AI - Synthetic data for more efficient and ethical model development w/ Yashar Behzadi (Watch On Demand) December 31 - AMA with LinearB - Improving workflow for developers w/ Ori Keren (Watch On Demand) January 10 - Inside Startups Coffee Break (Register Here) January 17 - Inside Marketing Coffee Break (Register Here) January 31 - Growth Summit 2023 (Register Here)

Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords.

Security Compass delivers best-practice, role-based, accredited eLearning solutions.

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2022 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Security. Click here to unsubscribe from Inside Security list or manage your subscriptions.