News
  • "OWASP Lists 10 Most Critical Large Language Model Vulnerabilities"

    The Open Worldwide Application Security Project (OWASP) has released a list of the top 10 most critical vulnerabilities commonly found in Large Language Model (LLM) applications, emphasizing their potential impact, exploitability, and prevalence. The…

  • ​​​​​​​"Informing and Inspiring the Next Generation of Cyber Talent Through Competition"

    US Cyber Games kicked off the competition to identify and select the Season III US Cyber Team last week. Over the next few months, athletes aged 18 to 24 will participate in events that will culminate with the selection of the top cyber athletes in…

  • "NASA Website Flaw Jeopardizes Astrobiology Fans"

    A vulnerability in NASA's astrobiology website could have led users to malicious websites by masking a dangerous URL with NASA's name. The Cybernews research team independently found an open redirect vulnerability impacting NASA's astrobiology website.…

  • "Exploitation of Vulnerabilities Have Soared, Unit 42 Report Finds"

    Security researchers at Palo Alto Networks' Unit 42 discovered that the number of vulnerabilities exploited in 2022 has grown by 55% compared to 2021.  The researchers noted that Linux malware emerged as a growing concern last year, particularly…

  • "$10.3 Billion in Cyber Crime Losses Shatters Previous Totals"

    The most recent FBI Internet Crime Report details over 800,000 cybercrime-related complaints filed in 2022. According to the report, total losses exceeded $10 billion, surpassing the $6.9 billion total for 2021, as reported by the FBI's Internet Crime…

  • "NSA and Co-Authors Recommend Best Practices to Secure Remote Access Software"

    Cybercriminals are using legitimate remote access software to gain access to victims' systems, blend in with regular network activity, and bypass detection. The National Security Agency (NSA), together with co-authors, released the "Guide to Securing…

  • "Three Vulnerabilities Discovered in Game Dev Tool RenderDoc"

    Three critical vulnerabilities have recently been discovered in RenderDoc, a graphics debugger that supports multiple operating systems, including Windows, Linux, Android, and Nintendo Switch.  The software holds a prominent position within the…

  • "Researchers Demonstrate Secure Information Transfer Using Spatial Correlations in Quantum Entangled Beams of Light"

    University of Oklahoma researchers led a study recently published in Science Advances that demonstrates using spatial correlations in quantum entangled light beams to encode information and enable its secure transmission. Light can be used to encode…

  • "North Korean Hackers Spoof Venture Capital Firms in Japan, Vietnam and US"

    According to new research, hackers based in North Korea are impersonating financial institutions and venture capital firms in the US, Vietnam, and Japan. Recorded Future's Insikt Group linked the campaign to APT38, a North Korea-sponsored group known for…

  • "KeePass Update Patches Vulnerability Exposing Master Password"

    Open source password manager KeePass has recently released an update to patch a vulnerability allowing attackers to retrieve the cleartext master password from a memory dump.  Tracked as CVE-2023-32784 and impacting KeePass 2.x versions, the issue…

  • "Google Patches Third Chrome Zero-Day of 2023"

    Google recently released a Chrome 114 security update that patches the third zero-day vulnerability found in the web browser in 2023.  Google said the latest version of Chrome patches two flaws, including CVE-2023-3079, a type confusion issue…

  • "UAlbany Research Looking for Cybersecurity Vulnerabilities"

    State University of New York (SUNY) at Albany (UAlbany) researchers have opened two new campus labs to explore the future of social media monitoring, digital forensics, and geospatial analysis, as well as the cybersecurity vulnerabilities of toys and…