News
-
"FIRST - New CVSS 4.0 Vulnerability Severity Rating Standard Released"The Forum of Incident Response and Security Teams (FIRST) has released the fourth version of the Common Vulnerability Scoring System (CVSS).
-
"MITRE ATT&CK v14 Released"MITRE ATT&CK v14 is the newest iteration of the popular investigation framework and knowledge base of cyberattackers' tactics and techniques. ATT&CK aims to classify and catalog cyber adversaries' behaviors in real-world attacks.
-
"Alliance of 40 Countries to Vow Not To Pay Ransom to Cybercriminals, US Says"A senior White House official announced on October 31 that 40 countries in an alliance led by the US plan to sign a pledge to never pay ransom to cybercriminals and to make an effort to eliminate the hackers' funding mechanism.
-
"Most Websites Do Not Publish Privacy Policies, Researchers Say"According to researchers at the Pennsylvania State University who crawled millions of websites, online privacy policies may not only be difficult to find but also nonexistent.
-
"Security Researchers Observed 'Deliberate' Takedown of Notorious Mozi Botnet"Researchers at the cybersecurity company ESET have observed what they believe to be a dismantling of the Mozi botnet, which has infiltrated over a million Internet of Things (IoT) devices globally.
-
"AI Research Team at RIT Publish Findings on Generative Harmful Content"Faculty and Ph.D. students at the Rochester Institute of Technology's (RIT) ESL Global Cybersecurity Institute identified problems regarding generative hate speech in Google's PaLM2 Large Language Model (LLM), which drives Bard.
-
"Monitoring Nuclear Weapons Stockpiles With Radio Waves"Information Technology (IT) security experts have developed a new method to monitor nuclear disarmament treaties. They created a mechanism that uses radio waves to remotely monitor if any changes are being made in a specific room.
-
"Research Suggests That Privacy and Security Protection Fell To The Wayside During Remote Learning"A study conducted by faculty and students at the University of Chicago and the University of Maryland uncovered tensions and breakdowns in the sociotechnical infrastructure of emergency remote learning that have compromised the privacy and data o
-
"Fake Malware Targets Cybercriminal Wannabes"HP Wolf Security has found fake malware designed to lure would-be cybercriminals into compromising their own devices.
-
"Iranian Hackers Caught Spying on Governments and Military in Middle East"An Iranian nation-state threat actor, tracked as Scarred Manticore, primarily targets government, military, and telecommunications sectors in Saudi Arabia, the United Arab Emirates, Jordan, Kuwait, Oman, Iraq, and Israel.
-
"KillNet Group Touts New Feature-Rich 'DDoS-For-Hire' Service"The threat group KillNet is selling a new Distributed Denial-of-Service (DDoS) tool that could encourage more cybercriminals to conduct DDoS attacks.
-
"Hackers Exploit Recent F5 BIG-IP Flaws in Stealthy Attacks"F5 has issued a warning to BIG-IP administrators about "skilled" hackers compromising devices by exploiting two recently disclosed vulnerabilities to hide their access and stealthily execute code.