News
-
"Zero-Day in Arm GPU Drivers Exploited in Targeted Attacks"A vulnerability, tracked as CVE-2023-4211, in the kernel drivers for several Mali GPUs "may be under limited, targeted exploitation," the British semiconductor manufacturer Arm confirmed when it released drivers updated with patches. -
"Iran-Linked APT34 Spy Campaign Targets Saudis"A phishing campaign that spreads cyber espionage malware is aimed at users in the Middle East. The campaign is conducted by the Advanced Persistent Threat (APT) tracked as APT34, also known as OilRig, Helix Kitten, and Cobalt Gypsy. -
"Time-To-Exploit: What It Means and Why It's Going Down"According to researchers, the average time it takes threat actors to exploit vulnerabilities before or after their public disclosure continues to decrease. -
"Machine Learning Technologies Revolutionize Security"Integrating Machine Learning (ML) technologies into different security aspects has brought a new era of proactive threat detection, risk mitigation, and improved decision-making processes. -
"Critical Vulnerabilities in Exim Threaten Over 250K Email Servers Worldwide"According to researchers, thousands of servers running the Exim mail transfer agent are vulnerable to attacks involving the exploitation of critical vulnerabilities that enable remote execution of malicious code with little or no user interaction.
-
"Security Researchers Believe Mass Exploitation Attempts Against WS_FTP Have Begun"Researchers suspect the mass exploitation of vulnerabilities in Progress Software's WS_FTP Server. Researchers at Rapid7 first observed evidence of exploitation across multiple instances of WS_FTP on September 30. -
"Hackers Steal User Database From European Telecommunications Standards Body"A nonprofit organization that develops communications standards reported that hackers stole a database containing user information. The European Telecommunications Standards Institute (ETSI) disclosed the incident last week. -
"AI-Generated Phishing Emails Almost Impossible to Detect, Report Finds"The potential for cybercriminals to use AI chatbots to create phishing campaigns has been cause for concern, and now security researchers at Egress have found that it is almost impossible to detect AI-generated phishing emails. -
"Transforming Vulnerability Management: CISA Adds OASIS CSAF 2.0 Standard to ICS Advisories"The US Cybersecurity and Infrastructure Security Agency (CISA) has announced that its security advisories for Industrial Control Systems (ICS), Operational Technology (OT), and medical devices now include the OASIS Common Security Advisory Framework (C -
"Recently Patched TeamCity Vulnerability Exploited to Hack Servers"According to security researchers at GreyNoise, in-the-wild exploitation of a critical vulnerability in JetBrains’ TeamCity continuous integration and continuous deployment (CI/CD) server started just days after the availability of a patch was announce -
NSA Codebreaker Challenge 2023: Calling All Student Codebreakers to the Ultimate Challenge!The National Security Agency (NSA) recently launched the NSA Codebreaker Challenge 2023, igniting the minds of aspiring codebreakers across the nation. -
"Hackers Attack US Healthcare Giant, More Than 190K People Affected"Prospect Medical Holdings operates over 150 clinics and dozens of hospitals in Southern California, Connecticut, Pennsylvania, and Rhode Island.