News
-
"Hackers Leverage PayPal to Send Malicious Invoices"Security researchers at Avanan, a Check Point company, found that threat actors have been leveraging the online payments system PayPal to send malicious invoices directly to users through the platform. The researchers noted that this is different… -
"Quarter of Crypto Tokens Linked to Pump-and-Dump"Security researchers at Chainalysis have discovered that almost a quarter (24%) of cryptocurrency tokens launched last year displayed the tell-tale signs of a pump-and-dump fraud scheme. Pump-and-dump schemes are common in traditional finance.…
-
"Experts Warn of Surge in Multipurpose Malware"Security researchers at Picus Security have warned that a growing number of versatile malware variants are capable of performing multiple malicious actions across the cyber-kill chain. Picus Security compiled its Red Report 2023 by analyzing over…
-
"ESXiArgs Ransomware Has Infected Hundreds of New Targets in Europe, Researchers Say"According to data collected by the security research firm Censys, the ESXiArgs ransomware has recently targeted over 500 European organizations. Researchers at Censys have been updating a dashboard that monitors the ransomware campaign's spread daily. In…
-
"AI-Based Visual Editing Service Leaks User Images and Customer Data"Internet users have become increasingly fascinated with Artificial Intelligence (AI)-based tools such as ChatGPT and DALL-E, but few have likely considered the security consequences of contributing text or images to such programs. Cybernews researchers…
-
"ChatGPT Subs In as Security Analyst, Hallucinates Only Occasionally"Experiments have demonstrated that ChatGPT, a popular Large Language Model (LLM), could help defenders in triaging potential security incidents and finding security flaws in code, even though the Artificial Intelligence (AI) model was not trained for…
-
"High-Risk Users May Be Few, but the Threat They Pose Is Huge"According to research conducted by Elevate Security, about 10 percent of the workforce is composed of high-risk users, who are in every department and function of the business. In addition, the study uncovered multiple unexpected findings. For example,…
-
"Hackers Start Using Havoc Post-exploitation Framework in Attacks"According to security researchers, threat actors are now using Havoc, an open-source command-and-control (C2) framework, as an alternative to paid options such as Cobalt Strike and Brute Ratel. Havoc's cross-platform nature and ability to evade Microsoft…
-
"Researchers Warn of Critical Security Bugs in Schneider Electric Modicon PLCs"Two new vulnerabilities affecting Schneider Electric Modicon Programmable Logic Controllers (PLCs) have been reported by security researchers at Forescout. These vulnerabilities could allow authentication bypass and Remote Code Execution (RCE). The…
-
"Our Neurodata Can Reveal Our Most Private Selves. As Brain Implants Become Common, How Will It Be Protected?"Brain-Computer Interfaces (BCIs) offer regained mobility and, more recently, thought-to-text capabilities to millions of people living with paralysis, epilepsy, and neuromuscular conditions. Few implanted versions of the technology have been…
-
"Developing a Successful Cyber Resilience Framework"According to Alberto G. Alexander, Ph.D., cyber resilience combines information security, business continuity, and organizational resilience. He has described the components of an effective cyber resilience strategy and highlighted a cyber resilience…
-
"An AI Flew a US Air Force Training Aircraft For Over 17 Hours"An artificial intelligence agent recently flew the Lockheed Martin VISTA X-62A training aircraft for over 17 hours. VISTA, which stands for Variable In-flight Simulation Test Aircraft, can use software to simulate the performance characteristics of…