News
-
"TLA+ Helps Programmers Squash Bugs Before Coding"Design is an integral component of the development process for most software engineers. A programmer devises algorithms to support their code and constructs models to visualize how the various parts of their systems will function together, similar to an… -
"National Internet Safety Month: Together, We Can Make Our K-12 Schools Cybersecure. It's Fundamental."The largest school district in Iowa canceled a day of classes in January due to a cyberattack on their network. The same month, Tucson Unified School District, the largest pre-K-12 school district in southern Arizona, experienced a ransomware attack,…
-
"Google Temporarily Offering $180,000 for Full Chain Chrome Exploit"Google recently announced significantly higher bug bounty rewards for vulnerability reports containing full chain exploits leading to a sandbox escape in Chrome. Until December 1, 2023, the first report to contain a full chain exploit leading to a…
-
"Phishing Defense, One Simulated Email at a Time"San Francisco uses an automated solution to train its 30,000 employees to recognize and report phishing attacks. According to Michael Makstman, the city and county's CISO, all employees receive at least one simulation per month. If the platform detects…
-
"High-Severity Vulnerabilities Patched in Splunk Enterprise"Splunk recently announced Splunk Enterprise security updates that resolve multiple high-severity vulnerabilities, including some impacting third-party packages used by the product. The most severe of these is CVE-2023-32707, a privilege escalation…
-
"Idaho Hospitals Working to Resume Full Operations After Cyberattack"Two eastern Idaho hospitals and their clinics are working to resume full operations after a cyberattack on their computer systems. Officials with Idaho Falls Community Hospital stated that the cyberattack happened Monday, causing some clinics to…
-
"US, ROK Agencies Alert: DPRK Cyber Actors Impersonating Targets to Collect Intelligence"The National Security Agency (NSA) is collaborating with several organizations to draw attention to the Democratic People's Republic of Korea's (DPRK) use of social engineering and malware to target think tanks, academic institutions, and the news media…
-
"Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering"Camaro Dragon, a Chinese nation-state group, has been linked to another backdoor designed for its intelligence-gathering. Check Point researchers named the Go-based malware "TinyNote," stating that it is a first-stage payload capable of "basic machine…
-
"New Horabot Campaign Takes Over Victim's Gmail, Outlook Accounts"Since at least November 2020, a previously unknown campaign involving the Horabot botnet malware has been targeting Spanish-speaking users in Latin America, infecting them with a banking Trojan and spam tool. The malware allows the operators to seize…
-
"Sustained 'Red Deer' Phishing Attacks Impersonate Israel Post, Drop RATs"A sustained phishing campaign impersonating Israel's postal service has targeted Israeli engineering and telecommunications companies. According to research conducted by Perception Point, the phishing emails typically appear to be delivery notices…
-
"Will Federated Learning Revolutionize AI Training?"Jiaming Xu, an associate professor at Duke University's Fuqua School of Business, and his coauthors explored how to keep data safe and private when using a new decentralized, collaborative way of training Artificial Intelligence (AI) models. Xu says…
-
"PyPI Enforces 2FA Authentication to Prevent Maintainers' Account Takeover"The Python Package Index (PyPI), the official repository of third-party open source Python projects, will require two-factor authentication (2FA) for all project maintainers by the end of 2023. Supply chain attacks against the Python software repository…