News
-
"20 Million Cutout.Pro User Records Leaked on Data Breach Forum"AI service Cutout.Pro has recently suffered a data breach exposing the personal information of 20 million members.
-
"Echoes of SolarWinds in New 'Silver SAML' Attack Technique"In the SolarWinds attack, the threat actor behind it compromised the company's Orion network management product and used it to infiltrate target enterprise networks.
-
"Malicious AI Models on Hugging Face Backdoor Users' Machines"At least 100 malicious Artificial Intelligence (AI)/Machine Learning (ML) models were discovered on the Hugging Face platform, with some capable of executing code on the victim's machine, providing attackers with a persistent backdoor.
-
"Meta Patches Facebook Account Takeover Vulnerability"Meta recently patched a critical vulnerability that could have been exploited to take control of any Facebook account.
-
"'Side-Channel' Attacks, New Cyberdefense Techniques Focus of Montana State U. Research"The Idaho National Laboratory has announced the award of two grants to Montana State University researchers to help them advance their efforts to make the country's critical infrastructure more secure against cyberattacks.
-
"Iran-Linked UNC1549 Hackers Target Middle East Aerospace & Defense Sectors"UNC1549, an Iran-linked threat actor, has been attributed to new attacks targeting aerospace, aviation, and defense industries in the Middle East.
-
"CISA Publishes Guide to Support University Cybersecurity Clinics"According to Clayton Romans, US Cybersecurity and Infrastructure Security Agency (CISA) Associate Director of the Joint Cyber Defense Collaborative (JCDC), small and local organizations face a unique cybersecurity challenge.
-
"State-Sponsored Hackers Know Enterprise VPN Appliances Inside Out"According to Mandiant incident responders and threat hunters, suspected Chinese state-sponsored hackers who exploited Ivanti Connect Secure VPN flaws to breach a number of organizations have showed "a nuanced understanding of the appliance." They
-
"US Bans Trading With Canadian Network Intelligence Firm Sandvine"The US government recently added Canadian network intelligence firm Sandvine to its Entity List, effectively banning organizations from trading with it.