News
-
"A Zero-Day Vulnerability (And PoC) to Blind Defenses Relying on Windows Event Logs"A zero-day vulnerability, discovered by a security researcher named Florian and reported to Microsoft, has the potential to crash the Windows Event Log service on all supported (and some legacy) versions of Windows.
-
"Hack of PJ&A Tops 2023 US Healthcare Data Breaches as Tally Jumps by 4M"An attack on the medical transcription company Perry Johnson & Associates (PJ&A) is now considered the largest US health sector data breach that occurred in 2023.
-
"New Linux glibc Flaw Lets Attackers Get Root on Major Distros"Attackers can gain root access on multiple major Linux distributions in their default configurations by exploiting a Local Privilege Escalation (LPE) vulnerability in the GNU C Library (glibc).
-
"CyberArk Releases Online Ransomware Decryptor"CyberArk has released an online version of its open-source White Phoenix ransomware decryptor to help ransomware victims recover their files.
-
"Ivanti Zero-Day Patches Delayed as 'KrustyLoader' Attacks Mount"Attackers exploited a pair of now-patched critical zero-day vulnerabilities in Ivanti VPNs.
-
"Leaked GitHub Token Exposed Mercedes Source Code"According to security researchers at RedHunt, a GitHub token leaked by a Mercedes-Benz employee provided access to all the source code stored on the carmaker’s GitHub Enterprise server.
-
"US Sanctions Two ISIS-Affiliated Cybersecurity Experts"The US Treasury Department recently announced sanctions against two "cybersecurity experts" accused of running a platform affiliated with the Islamic State group. The sanctioned individuals are both Egyptian nationals.
-
"Researchers Win Award for Study on Text Embedding Privacy Risks"Four researchers from Cornell Tech won the Outstanding Paper Award at the 2023 Empirical Methods in Natural Language Processing (EMNLP) Conference for their paper titled "Text Embeddings Reveal (Almost) As Much As Text." Their paper delves into privacy
-
"Mapping Attacks on Generative AI to Business Impact"The IBM Institute for Business Value discovered that 84 percent of CEOs are concerned about widespread or destructive cyberattacks that generative Artificial Intelligence (AI) adoption could cause.
-
"Your Printer May Spill All of Your Secrets"Associate Research Professor Charles Harry at the University of Maryland shares his insights on the creativity of today's cyberattacks, as well as the five most unlikely places people could be vulnerable.
-
"Russian APT28 Phishing Ukraine's Military to Steal Login Info"Ukraine's National Cyber Security Coordination Center (NCSCC) has warned its military members about a new phishing campaign launched by the Russian-backed cybercriminal group APT28.
-
"FBI and DOJ Disrupt Chinese Hacking Operation"In response to the Chinese state-sponsored hacking group Volt Typhoon targeting critical infrastructure in the US, the Department of Justice (DOJ) and the Federal Bureau of Investigation (FBI) dismantled the group's infrastructure.