Connect with us

Innovation and Technology

Ransomware Group Create Automated VPN and Firewall Brute Force Attack Tool

Published

on

Ransomware Group Create Automated VPN and Firewall Brute Force Attack Tool

Recently leaked chat logs from the Black Basta ransomware group have revealed many things, including that passwords and stolen 2FA codes are driving many attacks. That’s not exactly a shocking revelation, it has to be said. Nor, for that matter, that these stolen credentials were used in brute force credential-stuffing attacks against enterprise targets.

Newly Published Research Confirms Brute Forcing Framework

New research by Arda Büyükkaya, a cyber threat intelligence analyst at EclecticIQ, has now confirmed “a previously unknown brute forcing framework” that has been used by the Black Basta gang to automate the process of gaining access to enterprise VPNs and firewalls. The tool, called Bruted, is designed to automate the process of gaining access to enterprise VPNs and firewalls by scanning for valid hostnames and IP addresses, and then using locally generated guesses to perform bulk authentication attempts.

How Ransomware Actors Employ the Bruted Brute Force Tool

The Bruted script is written in PHP and applies specialized brute-force logic for every individual attack platform, using tailored user-agent strings, endpoint paths, and success checks. The tool works by automating subdomain enumeration and IP resolution for any given domain to scan for potentially valid hostnames and IP addresses. It reports any discovered hosts back to a remote command-and-control endpoint, and then collates likely passwords from a remote server and combines them with locally generated guesses to perform bulk authentication attempts.

Targeted Vendors and Technologies

The tool is configured to attack a range of known targets, including SonicWall NetExtender, Palo Alto GlobalProtect, Cisco AnyConnect, Fortinet SSL VPN, Citrix NetScaler (Citrix Gateway), Microsoft RDWeb, and WatchGuard SSL VPN.

Mitigation Strategies

To mitigate these ransomware attacks, Büyükkaya recommended ensuring all devices are fully patched and up to date, password and login policies are strengthened, and unnecessary services and features are disabled.

Conclusion

The rise of automated brute force attacks against enterprise VPNs and firewalls is a growing concern for organizations looking to protect themselves against ransomware attacks. The Bruted tool is a sophisticated solution that enables attackers to gain initial access to target networks and then deploy ransomware. It is essential for organizations to stay vigilant and implement robust security measures to prevent these attacks.

Frequently Asked Questions

Q: What is the Bruted tool?
A: The Bruted tool is a PHP-based brute forcing framework used by the Black Basta ransomware group to automate the process of gaining access to enterprise VPNs and firewalls.

Q: What is the purpose of the Bruted tool?
A: The purpose of the Bruted tool is to automate the process of gaining access to enterprise VPNs and firewalls by scanning for valid hostnames and IP addresses, and then using locally generated guesses to perform bulk authentication attempts.

Q: What are the targeted vendors and technologies?
A: The targeted vendors and technologies include SonicWall NetExtender, Palo Alto GlobalProtect, Cisco AnyConnect, Fortinet SSL VPN, Citrix NetScaler (Citrix Gateway), Microsoft RDWeb, and WatchGuard SSL VPN.

Innovation and Technology

The Importance of Regular DEIA Audits: Software Solutions for Continuous Improvement

Published

on

The Importance of Regular DEIA Audits: Software Solutions for Continuous Improvement

Are you leveraging software and platforms for DEIA to create a more inclusive and equitable work environment? In today’s fast-paced business landscape, Diversity, Equity, Inclusion, and Accessibility (DEIA) audits have become crucial for organizations to identify areas of improvement and foster a culture of belonging. Regular DEIA audits can help companies stay ahead of the curve and ensure that their policies, practices, and procedures are fair, equitable, and inclusive.

What are DEIA Audits?

A DEIA audit is a comprehensive examination of an organization’s policies, procedures, and practices to identify areas of strength and weakness in terms of diversity, equity, inclusion, and accessibility. The audit process involves collecting and analyzing data, conducting interviews and focus groups, and reviewing documents and policies to assess the organization’s DEIA efforts. The goal of a DEIA audit is to provide recommendations for improvement and help organizations create a more inclusive and equitable work environment.

Benefits of Regular DEIA Audits

Regular DEIA audits can bring numerous benefits to an organization, including improved employee engagement, increased diversity, and enhanced reputation. By identifying and addressing DEIA-related issues, organizations can create a more inclusive and equitable work environment, which can lead to increased employee satisfaction, retention, and productivity. Additionally, regular DEIA audits can help organizations stay compliant with regulations and avoid potential lawsuits.

Types of DEIA Audits

There are several types of DEIA audits, including internal audits, external audits, and hybrid audits. Internal audits are conducted by an organization’s internal team, while external audits are conducted by external consultants or experts. Hybrid audits combine elements of both internal and external audits. The type of audit chosen depends on the organization’s size, complexity, and DEIA goals.

Software Solutions for DEIA Audits

Technology can play a significant role in facilitating DEIA audits and improving the overall DEIA process. There are various software solutions available that can help organizations conduct DEIA audits, track progress, and identify areas for improvement. These software solutions can include survey tools, data analytics platforms, and DEIA management software.

Survey Tools

Survey tools are essential for collecting data and feedback from employees, customers, and other stakeholders. These tools can help organizations identify areas of strength and weakness in terms of DEIA and provide insights into the experiences and perceptions of different groups. Popular survey tools include SurveyMonkey, Qualtrics, and Culture Amp.

Data Analytics Platforms

Data analytics platforms can help organizations analyze and interpret DEIA-related data, identify trends and patterns, and track progress over time. These platforms can include tools such as Tableau, Power BI, and Domo. By leveraging data analytics platforms, organizations can make data-driven decisions and develop targeted strategies to improve DEIA outcomes.

DEIA Management Software

DEIA management software is designed to help organizations manage and track DEIA-related data, policies, and procedures. These software solutions can include tools such as DEIA dashboards, training platforms, and policy management systems. Popular DEIA management software includes Workboard, Culture Amp, and IBM Kenexa.

Best Practices for Conducting DEIA Audits

Conducting a DEIA audit requires careful planning, execution, and follow-up. Best practices for conducting DEIA audits include establishing clear goals and objectives, engaging stakeholders, and ensuring confidentiality and anonymity. Organizations should also ensure that the audit process is inclusive and accessible, and that the findings and recommendations are communicated effectively to all stakeholders.

Establishing Clear Goals and Objectives

Establishing clear goals and objectives is critical to the success of a DEIA audit. Organizations should define what they want to achieve through the audit, what areas they want to focus on, and what metrics they will use to measure success. Clear goals and objectives will help guide the audit process and ensure that the findings and recommendations are relevant and actionable.

Engaging Stakeholders

Engaging stakeholders is essential to the success of a DEIA audit. Organizations should involve employees, customers, and other stakeholders in the audit process to ensure that their voices are heard and their experiences are taken into account. Stakeholder engagement can include surveys, focus groups, and interviews.

Ensuring Confidentiality and Anonymity

Ensuring confidentiality and anonymity is critical to the success of a DEIA audit. Organizations should ensure that all data and feedback collected during the audit are kept confidential and that respondents are anonymous. This will help encourage honest and candid feedback and ensure that respondents feel safe and supported.

Conclusion

Regular DEIA audits are essential for creating a more inclusive and equitable work environment. By leveraging software solutions and best practices, organizations can conduct effective DEIA audits, identify areas for improvement, and develop targeted strategies to improve DEIA outcomes. Remember, DEIA is a continuous process that requires ongoing effort and commitment. By prioritizing DEIA and conducting regular audits, organizations can foster a culture of belonging, improve employee engagement, and drive business success.

Frequently Asked Questions

What is a DEIA audit?

A DEIA audit is a comprehensive examination of an organization’s policies, procedures, and practices to identify areas of strength and weakness in terms of diversity, equity, inclusion, and accessibility.

Why are DEIA audits important?

DEIA audits are important because they help organizations identify and address DEIA-related issues, improve employee engagement, increase diversity, and enhance reputation.

How often should DEIA audits be conducted?

DEIA audits should be conducted regularly, ideally every 2-3 years, to ensure that organizations are continuously improving and addressing emerging DEIA issues.

What software solutions are available for DEIA audits?

There are various software solutions available for DEIA audits, including survey tools, data analytics platforms, and DEIA management software.

How can organizations ensure the success of a DEIA audit?

Organizations can ensure the success of a DEIA audit by establishing clear goals and objectives, engaging stakeholders, and ensuring confidentiality and anonymity.

Continue Reading

Innovation and Technology

AI Agents Playing Video Games Will Transform Future Robots

Published

on

AI Agents Playing Video Games Will Transform Future Robots

Introduction to AI Agents in Video Game Environments

Video games have played an important role in the development of AI. Many early demonstrations of machine learning involved teaching computers to play games. Eventually, Google Deepmind’s mastery of the game Starcraft 2 was taken as proof that machines could now compete with us across many fields in which we were previously undisputed champions.

Now, games are being used as a testbed for exploring some of the most exciting new areas in AI, including autonomous agents, real-world robots and perhaps even the quest for AGI. At this year’s Game Developer’s Conference, Google’s DeepMind AI division demonstrated its research into what it calls Scalable Instructable Multiworld Agents (SIMA). The idea is to show that machines can navigate and learn inside the 3D worlds of video game environments. They can then use what they’ve learned to navigate entirely different worlds and tasks, all with their own rules, using whatever tools are available to them to solve problems.

It might sound like child’s play, but this research could dramatically impact the development of the agentic AI we’ll use in our work and personal lives. So let’s take a look at what it could mean, and whether it could even solve the ultimate AI challenge of creating machines capable of adapting to any situation, much like humans can.

Virtual Worlds

Video games provide a great environment for training AI because the variety of tasks and challenges is almost infinite. Importantly, the player usually solves these challenges using a standard set of tools, all accessed via the game controller. This corresponds well with the way AI agents tackle problems by choosing which tools to use from a pre-defined selection. Game worlds also provide safe, observable and scalable environments where the effects of subtle changes to variables or behavior can be explored at little real-world cost.

DeepMind’s SIMAs were trained across nine different video game environments, taken from popular games including No Man’s Sky, Valheim and Goat Simulator. The agents were given the ability to interact and control the games using natural language commands like “pick up the key” or “move to the blue building.” Among the standout findings, the research showed that the agents are highly effective at transferable learning—taking what they learn in one game and using it to get better at another.

This was backed up by observations that agents trained to play eight of the nine games performed better at the one game they were untrained on than specialized agents solely trained on the one game. This dynamic learning ability will be critical in a world where agents are working alongside us, helping us explore, interpret and understand messy real-world problems and situations.

Physical Robots

The development of real-world robots that carry out physical tasks has accelerated in the last decade, hand-in-hand with the evolution of AI. However, they are still generally only used by large businesses due to the high cost of training them for specialist roles. Using virtual and video game environments could dramatically lower this cost. The theory is that transferable learning will enable physical robots to use their hands, arms or whatever tools they have to tackle many physical challenges, even if they haven’t come across them before.

For example, a robot that effectively learns how to use its hands to work in a warehouse might also learn how to use them to build a house. Before it released ChatGPT, OpenAI demonstrated research in this field. Dactyl is a robotic hand, trained in virtual simulated environments, that learned how to solve a Rubik’s Cube. This was one of the first demonstrations of the potential of transferring skills learned in virtual environments to complex physical-world tasks.

More recently, Nvidia has developed its Isaac platform expressly for the purpose of training robots to “learn to learn” how to carry out real-world tasks inside virtual environments. Today, physical AI-assisted robots are put to work in warehouse roles, agriculture, healthcare, deliveries, and many other jobs. In most cases, however, these robots are still doing tasks they were specifically trained for—at enormous expense by companies with very deep pockets.

But new models of “affordable” robots are on the horizon. Tesla plans to manufacture thousands of its Optimus robots this year and assign many of them to work in its factories. And Chinese robotics developer Unitree recently unveiled a $16,000 humanoid robot that can turn its hand to many tasks. With the price of robots falling and their AI brains becoming more powerful by the day, walking, talking humanoid robots could be stepping out of science fiction into everyday reality sooner than we think.

Toward AGI?

Almost 30 years ago, machines scored their first big win over humans by defeating Gary Kasparov at Chess. Few would have predicted then that a computer would exist that could beat world champions not just at one game, but at any game. This ability to “generalize” information by taking knowledge from one task and using it to solve an entirely different one is traditionally exclusive to humans, but that could be changing.

All of this will be hugely interesting to those chasing the holy grail of AI development, artificial general intelligence (AGI). Evidence that agents like DeepMind’s SIMAs are able to transfer learning from one virtual game environment to another suggests they may be developing some of the qualities needed for AGI. It demonstrates that they are progressively building competencies that can be applied to solving future problems.

Google, along with OpenAI, Anthropic and Microsoft, have all stated that developing AGI is their eventual goal, and it’s clearly the logical endpoint of the current focus on agentic intelligence. With video games, could another part of the puzzle be in place?

Conclusion

The use of video game environments to train AI agents is a promising area of research that could have significant implications for the development of real-world robots and AGI. The ability of agents to transfer learning from one game to another and apply it to new challenges is a key step towards creating machines that can adapt to any situation. As the cost of robots continues to fall and their AI brains become more powerful, we can expect to see more humanoid robots in our daily lives, performing a variety of tasks and helping us in many ways.

FAQs

Q: What is Scalable Instructable Multiworld Agents (SIMA)?
A: SIMA is a research project by Google’s DeepMind AI division that aims to train AI agents to navigate and learn inside 3D video game environments and apply what they’ve learned to new challenges.

Q: What is the significance of transferable learning in AI agents?
A: Transferable learning allows AI agents to take what they’ve learned in one environment and apply it to new challenges, which is a key step towards creating machines that can adapt to any situation.

Q: How can virtual and video game environments be used to train physical robots?
A: Virtual and video game environments can be used to train physical robots by providing a safe, observable, and scalable environment to explore and learn from, which can lower the cost of training robots for specialist roles.

Q: What is the ultimate goal of AI development?
A: The ultimate goal of AI development is to create artificial general intelligence (AGI), which refers to a machine that can perform any intellectual task that a human can.

Q: Which companies are working towards developing AGI?
A: Google, OpenAI, Anthropic, and Microsoft are some of the companies that have stated their goal of developing AGI.

Continue Reading

Innovation and Technology

Tech’s Next Frontier Under Threat

Published

on

Tech’s Next Frontier Under Threat

Introduction to Quantum Computing

Quantum is the next big thing in computing. But while there’s clearly a lot of hype, I do believe it could potentially be a solution to some pretty important problems. From vastly decreasing the time it takes to formulate new drugs to creating greener energy, there will be huge opportunities for businesses to break new ground. However, there’s a big problem: there’s a severe shortage of people with the skills businesses will need for quantum computing to achieve anything like its full potential.

The Skills Gap Challenge

The UK’s National Quantum Strategy specifically highlights this skills gap as a challenge that needs to be addressed for quantum computing to deliver prosperity and security. So, what skills will be needed, what roles will businesses need to fill, and why is it essential for leaders to take action now when truly useful quantum computing could be years away?

How Will Quantum Affect Workforce Skills?

Quantum computing, which harnesses the mind-bending possibilities of quantum physics to carry out some calculations at speeds far higher than classical computers, has huge implications for businesses. Experts will be needed in quantum hardware and software, quantum algorithms, and the science of interpreting data at the scale at which quantum can process it. For some calculations, this can be hundreds of millions of times faster than classical computers. Aside from these hard technical skills, specialists in many fields like healthcare, pharmaceuticals, finance, logistics, and cybersecurity will need to understand the possibilities that quantum holds for them.

This doesn’t mean they have to become quantum scientists. But people will need to be comfortable with the idea of using a new generation of quantum tools and technologies. This expertise in applied quantum computing will be critical for businesses that deal with many kinds of data analytics and building simulations, including those that model biological systems, weather patterns, and financial markets. Business executives and leaders, too, will need to understand how the arrival of quantum computing will affect the skills they need. There will be a strong demand for individuals in leadership roles who not only know what quantum can do but can also build cultures conducive to innovation and apply it to hitting strategic goals.

What Can Businesses Do Now?

Some people, like Nvidia CEO Jensen, believe it will be a long time before practical quantum computing is viable. Industry as a whole doesn’t necessarily agree, though, with investment in research and skills steadily increasing and real-world use cases emerging. In my opinion, there are several important things that any business that could be affected by quantum computing should be doing now. One is to develop a quantum strategy. This means assessing how it will impact your sector and identifying the opportunities for growing the business or improving outcomes.

Another is to invest in education and training. This involves upskilling existing employees to understand the implications and opportunities. It can be done through online courses, in-house training, or by partnering with education providers. Google, Microsoft, and IBM offer courses aimed at business professionals. Businesses also shouldn’t overlook the benefits that come with networking and collaborating with experts. Identify who the leaders are in the field when it comes to adopting quantum in your industry, build partnerships, and consider engaging with outside consultants. And finally, ensure that you lay the foundation for a culture that encourages a holistic, multi-disciplinary approach to quantum, including the skilling elements we’re looking at today. This means encouraging everyone to talk about what they’re doing and share the lessons they learn.

Address The Skills Challenge Now To Prepare For The Quantum Era

A report this year from the World Economic Forum found that most organizations are woefully underprepared for the quantum-powered future. Businesses that wait for the technology to become mainstream before taking action to address the skills gap are setting themselves up to be at a disadvantage to faster-moving competitors. I believe that thinking of quantum computing as just another emerging technology is a mistake. AI relies on vast computing power, and many AI calculations could be significantly accelerated on quantum hardware. So, there could come a time when being on the cutting edge of AI requires quantum expertise.

Without the ability to train and attract the right talent and a framework in place for them to build on, businesses will miss out. But those who understand the future that’s coming and move to put the right skills and training in place now are set for success.

Conclusion

In conclusion, quantum computing has the potential to revolutionize various industries, but the lack of skilled professionals poses a significant challenge. Businesses must take proactive steps to address this skills gap by developing a quantum strategy, investing in education and training, and fostering a culture of innovation. By doing so, they can stay ahead of the curve and capitalize on the opportunities that quantum computing has to offer.

FAQs

  • Q: What is quantum computing?
    A: Quantum computing is a type of computing that uses the principles of quantum physics to perform calculations at speeds far higher than classical computers.
  • Q: What skills will be needed for quantum computing?
    A: Experts will be needed in quantum hardware and software, quantum algorithms, and the science of interpreting data at the scale at which quantum can process it.
  • Q: How can businesses prepare for the quantum era?
    A: Businesses can prepare by developing a quantum strategy, investing in education and training, networking and collaborating with experts, and fostering a culture of innovation.
  • Q: Why is it essential to address the skills gap now?
    A: Addressing the skills gap now is essential to avoid being left behind by faster-moving competitors and to capitalize on the opportunities that quantum computing has to offer.
Continue Reading
Advertisement

Our Newsletter

Subscribe Us To Receive Our Latest News Directly In Your Inbox!

We don’t spam! Read our privacy policy for more info.

Trending