Omer Frenkel

Revelations about spyware like NoviSpy and misuse of Cellebrite tools highlight alarming vulnerabilities in digital security. Journalists, activists, and civil society are at risk of surveillance, exposing critical gaps in privacy and data protection. How Delledox Can Help: 1. Vulnerability Assessment: Identify weaknesses in mobile and web systems. 2. Penetration Testing: Simulate real-world attacks to fortify defenses. 3. Proactive Security Measures: Implement solutions to prevent unauthorized data access. Protect your organization from unlawful surveillance with Delledox. Delledox Security Amit Kaushik #Cybersecurity #VulnerabilityAssessment #PrivacyProtection #Delledox

4

Data Breach Alert ☣  - Alleged data sale of Israeli Air Force Threat actor claims to be selling data related to the Israeli Air Force, including detailed information about active and inactive pilots and employees. The alleged data contains information such as ranks, positions, service records, and training qualifications. The leak reportedly includes information from several airbases, such as Haifa, Hatzor, Ovda, Nevatim, Ramat David, Ramón, Tel Nof, Sdot Micha, and the special forces group. - #data_breach #data_leak #infosec #dark_web #DataBreach  #DataLeak  #Services  #CyberThreat  #CyberAttack

27

Access management is far more than a technical task—it’s critical for preventing real-world threats. In my latest analysis for ITtime by Geektime, I break down how expired access permissions nearly led to a disaster and why even QR codes can become security risks. #Cybersecurity #AccessManagement #ITSecurity #TechInsights

5

In a recent interview with Walla, I discussed the crucial topic of safeguarding business data, emphasizing the significant impact of even minor errors by employees on an entire organization. I highlighted key aspects of data security and drew parallels to the largest data breach in history, underscoring its profound implications. #DataSecurity #BusinessProtection #CyberSecurity

1

The recent coordinated cyberattack on Hezbollah’s Rugged Pager AR924 communication devices (beepers) represents a pivotal escalation in the ongoing conflict between Israel and Iranian-backed militant groups. This operation probably targeting lithium-ion batteries (remote signal manipulation of the pager's firmware probably using Radio Frequencies) likely executed by Israeli Unit 8200, underscores Israel’s intent to degrade Hezbollah’s operational capabilities without resorting to conventional military engagement. Tactically, this incident mainly serves three purposes: it disrupts Hezbollah’s military communications, creating disorganization within their ranks, while also preparing the battlefield for potential future Israeli offensives; a third purpose of the attack could be to demoralize Hezbollah's ranks by instilling fear: by targeting their communication systems, vital to day-to-day coordination, the attack shows Hezbollah operatives that even their supposedly secure, low-tech devices can be compromised, creating an atmosphere of distrust and paranoia. The degradation of Hezbollah’s command and control systems forces the group to reassess its communication strategies, possibly driving them towards less efficient and more detectable alternatives. Simultaneously, Israel’s ability to conduct such a precise attack without physical military action signals that it can neutralize Hezbollah’s capabilities in various manners. This raises the stakes for both Hezbollah and the Iranian Revolutionary Guard Corps (IRGC). Contact us for Deep Analysis: https://lnkd.in/d8qwMdEZ #CyberSecurity #Hezbollah #MiddleEastConflict #StrategicIntelligence #ProtectiveIntelligence #GeopoliticalAnalysis #TacticalOperations #AdvancedCyberThreats #OperationalDisruption #RadioFrequencyManipulation #CyberThreats #HezbollahIntel #Unit8200 #CyberDefense #IsraelDefenseStrategy #SupplyChainVulnerabilities #RegionalSecurity #DigitalWarfare #CommunicationSecurity #IntelligenceAnalysis #CyberAttack #CyberTactics #DigitalTransformation #AdvancedTechSecurity #StrategicCommunications #BusinessContinuity #GovernmentIntelligence #JoseParejoAndAssociates

7

‏6‏ ‏תגובות‏

🔍 Rising Cyber Threats: Inside the Digital Tactics of Pro-Israel Groups 🔍 Our latest analysis highlights the diverse tactics used by pro-Israel groups in cyber operations, with key attack methods including: 💻 Website Defacement (44.8%): Groups supporting Israel may make unauthorized changes to the appearance or content of a targeted website. These changes are usually made to the site's homepage and include a page with the attackers' message or purpose. 🌐 DDoS Attacks (%29.9): Pro-Israel groups have been using Distributed Denial of Service (DDoS) attacks against Iranian online services. These attacks involve sending massive traffic to make targeted websites temporarily inaccessible. 🕵️‍♂️ Cyber Espionage and Information Collection (%10.4): Pro-Israel groups may engage in cyber espionage to collect sensitive data from specific individuals or organizations. ⚠️ Social Engineering and Ransomware (%7.5): Pro-Israel groups use social engineering tactics to achieve their goals. They may also use ransomware to harm their targets or steal information. 🎣 Phishing Attacks (%7.5): In some cases, pro-Israel organizations may resort to phishing attacks to obtain sensitive information from targeted groups or individuals. These findings underscore the broad and evolving nature of cyber threats posed by groups aligned with Israel. Stay informed and vigilant. For more insights, check out the full report 👉🏻 https://lnkd.in/eK_MWHeV #CyberSecurity #CyberThreats #DDoSAttack #WebsiteDefacement #CyberEspionage #Phishing #Ransomware #ProIsraelGroups #DigitalDefense #StaySafeOnline

28

🚨 NoviSpy Spyware Installed on Journalist's Phone After Unlocking It With Cellebrite Tool 🚨 A Serbian journalist’s phone 📱 was unlocked with Cellebrite’s tools and infected with #NoviSpy, a #spyware capable of: 🎯 Hijacking #cameras and #microphones 🎯 Tracking #locations 🎯 Stealing files, messages, and sensitive data Read more - https://lnkd.in/gtyBjq8d #technology #malware #cyberdefense #threatmanagement #cybersecurity #ITsecurity #threatintelligence #infosec #cybercrime #ciso #riskmanagement #mobilesecurity #mobiledevices #datasecurity

2

In light of escalating threats from Hezbollah and Iran, and with intelligence indicating potential hostile actions on April 9th, we must prepare for a possible surge in cyberattacks, both within Israel and among our global partners. All employees are urged to exercise extreme caution and remain vigilant for any suspicious activities. Report any anomalies or unusual events immediately. Adhering strictly to the organization's established procedures is vital, even during times of conflict. This information has been shared with our community, clients, and colleagues worldwide, who may also face heightened risks. Stay safe and stay alert! #CyberSecurity #DataProtection #IncidentResponse #RiskManagement #BusinessContinuity #CyberThreats #RSecurity

4

What if all the trending #buzzwords, when put together, actually made sense? 🧐 I spoke about global #election campaigns, and how #AI-generated #deepfake was used in trying to skew them. The talk is in Hebrew, but I'm sure there's an AI for that 😉 It was based on detailed research by CP<R>'s Yoav Arad Pinkas, which can be read here - https://lnkd.in/dGfkR4vE Wikimedia Israel Reichman University Check Point Software https://lnkd.in/dRpPKf3X

84

🚨 The Pager Explosions – A Wake-Up Call for Cyber Defence 🚨 Col. (res.) Dr. Oren Eytan, CEO of odix, warns in the PC article below, that the recent explosion of thousands of pagers used by Hezbollah operatives was not just a physical attack but a sophisticated cyber event. This attack shows how critical it is for organizations to prepare for cyberattacks that could target not just networks but critical infrastructure like traffic lights, hospitals, or power plants. Dr. Eytan emphasizes that the impact of such events—whether kinetic or digital—makes them cyberattacks, and organizations must act now. Protect your network, map your assets, and strengthen your defenses because the stakes have never been higher. Are you ready? odix Oren Eytan #CyberSecurity #CyberDefense #CriticalInfrastructure #odix #FileSecurity #CyberAttack #CyberResilience #Stuxnet #SolarWinds #ZeroTrust #PC https://lnkd.in/djN8nyB3

11

Some cyber risks are flying under the radar, leaving critical systems exposed. In a recent Walla article, Tal Kelem, Director of Business Development, BIRD HLS, and BIRD Cyber Lead, outlines five critical gaps in cybersecurity identified by the U.S. Department of Homeland Security and the Israel National Cyber Directorate - מערך הסייבר הלאומי. These vulnerabilities, which are the key focus areas of the current BIRD Cyber Call for Proposals, pose significant risk to critical infrastructure, personal data, and global networks - and tackling them demands bold, collaborative innovation. Tal identifies five key challenges: 1️⃣ Cyber Protection for Legacy Medical Devices: Many medical devices, like MRI and X-ray machines, were designed before cybersecurity was a priority. They remain vulnerable, and updating them is expensive and complex. The solution? Developing intermediary systems to protect these devices without altering their core functions. 2️⃣ BGP Hijacking Remediation: Malicious actors might divert network traffic through their servers, accumulating and compromising sensitive data. Current detection solutions are inadequate, leaving networks exposed. There’s a need for automated, efficient systems to detect and respond to these threats. 3️⃣ Online Face Image Self-Enrollment Compatible with International Standards: As biometric systems become a possible tool for identity verification - such as passport registration from home - ensuring the authenticity of facial photos is crucial to avoid fraud and misuse. 4️⃣ Threat Hunting on Encrypted Traffic: With more data being encrypted, detecting threats within that traffic without decrypting it is a huge challenge. We need advanced tools to identify malicious activities while preserving privacy. 5️⃣ Human-Machine (AI) Tools for Cybersecurity: As AI platforms, like ChatGPT, become integral to businesses, ensuring secure and efficient human-AI interactions is crucial. Developing user-friendly interfaces that prevent privacy breaches and improve security is essential. U.S.-Israel collaboration is key in addressing these challenges; by combining the expertise of two cybersecurity leaders, the BIRD Cyber program fosters partnerships that create impactful solutions - solutions that the free market alone may not deliver. 🚨 BIRD Cyber Call for Proposals is now open, offering up to $1.5 million in non-dilutive funding! If you’re developing innovative cybersecurity solutions, submit your proposal by January 29, 2025. Learn more here: https://lnkd.in/eYPGRxVS 👉 For the Walla article in Hebrew, see: https://lnkd.in/dcU7uxiY #BIRDCyber #cybersecurity #threatdetection #innovation #US_Israel #collaboration #RandD #technology

24

🚨 LinkedIn Security Flaw 🚨 Please be aware of links in posts! Those are not always what the preview shows and could lead you to a phishing attack #phishing #security #flaws #linkedin

3

‏3‏ ‏תגובות‏

Chair of our Cyber and Privacy Group, Adv. Haim Ravia, and the Israeli Population Authority, have agreed to settle a lawsuit that Haim Ravia filed against the Population Authority asserting violations of privacy. Under the settlement, the Population Authority is already underway deleting biometric facial images of Israeli residents who have traveled abroad, ensuring the photos cannot be recovered. The Population Authority also pledged to advance legislation limiting both the retention of these images and the period they can be stored.   The lawsuit focused on the authority’s unauthorized collection, storage, and sharing of biometric data with the Israeli Security Agency until February 2022. This important settlement, certified by the court last week, marks a significant win for privacy. For the full media coverage of the pivot settlement (in Heb)👇🏼👇🏼👇🏼 Calcalist כלכליסט:  https://lnkd.in/d58fnM-t Walla: https://lnkd.in/d34xM_Gp Geektime גיקטיים: https://lnkd.in/dZzxUXdb People & Computers: https://lnkd.in/d7i6AGeh Law.co.il: https://lnkd.in/dC_2UA-X #Privacy #PrivacyProtection #PrivacyLaw #PearlCohen #LawFirm

16