News
-
"Two Students Uncover Security Bug That Could Let Millions Do Their Laundry for Free"A team of UC Santa Cruz students found a security flaw impacting Internet-connected laundry machines provided by CSC ServiceWorks.
-
"Norway Recommends Replacing SSL VPN to Prevent Breaches"The Norwegian National Cyber Security Centre (NCSC) recommends replacing Secure Socket Layer Virtual Private Network (SSL VPN)/WebVPN solutions with alternatives as related vulnerabilities in edge network devices repeatedly get exploited to breac
-
"CISA Publishes Encrypted DNS Implementation Guidance to Federal Agencies"The US Cybersecurity and Infrastructure Security Agency (CISA) has released "Encrypted Domain Name System (DNS) Implementation Guidance" for federal civilian agencies to meet requirements regarding the encryption of DNS traffic and impr
-
"AI-Generated Code Top Cloud Security Concern Amid 100% Use Rate in Survey"Palo Alto Networks' 2024 State of Cloud-Native Security report found that security vulnerabilities in Artificial Intelligence (AI)-generated code are the top cloud security concern for 2024.
-
"US Arrests Suspects Behind $73M Pig Butchering Laundering Scheme"The Department of Justice (DoJ) recently charged two suspects for allegedly leading a crime ring that laundered at least $73 million from cryptocurrency investment scams, also known as "pig butchering." In pig butchering scams, criminals approac
-
"Windows Quick Assist Anchors Black Basta Ransomware Gambit"Microsoft Threat Intelligence noted that "Storm-1811," a financially motivated threat actor tracked since mid-April, has been following the same playbook as the recent Black Basta ransomware vishing campaign.
-
"New Android Banking Trojan Mimics Google Play Update App"Cyble Research and Intelligence Labs (CRIL) discovered a new Android banking Trojan dubbed "Antidot." According to researchers, the malware is sophisticated as it includes overlay attacks, keylogging, and obfuscation capabilities.
-
"Critical Flaw in AI Python Package Can Lead to System and Data Compromise"A critical vulnerability in a Python package used by Artificial Intelligence (AI) application developers enables arbitrary code execution. The flaw, dubbed "Llama Drama," was discovered by researcher Patrick Peng.
-
"WebTPA Data Breach Impacts 2.4 million Insurance Policyholders"The U.S. Department of Health and Human Services recently announced that the WebTPA Employer Services (WebTPA) data breach disclosed earlier this month impacts nearly 2.5 million individuals.
-
Patient Data at Risk in MediSecure Ransomware AttackAustralian healthcare company MediSecure has recently suffered a “large scale” ransomware attack, putting individuals’ personal and health information at risk.
-
"Threat Actors Abuse GitHub to Distribute Multiple Information Stealers"A malicious campaign has used a legitimate GitHub profile to spread information-stealing malware.
-
"Flaw in Wi-Fi Standard Can Enable SSID Confusion Attacks"According to researchers at Belgium's KU Leuven, attackers can exploit a fundamental design flaw in the IEEE 802.11 Wi-Fi standard to trick victims into connecting to a less secure wireless network.