News
-
"Pirated Software Likely Cause of Airbus Breach"According to security researchers at Hudson Rock, a major data breach at Airbus revealed earlier this week stemmed from a RedLine info-stealer likely hidden in a pirated copy of Microsoft software. The European aerospace giant said it has launched… -
"BlackCat Ransomware Hits Azure Storage With Sphynx Encryptor"The BlackCat (ALPHV) ransomware group encrypts Azure cloud storage using stolen Microsoft accounts and the recently discovered Sphynx encryptor. Sophos X-Ops incident responders found that the attackers used a new Sphynx variant with added support for…
-
"Kubernetes Vulnerability Allows RCE on Windows Endpoints"Three high-severity Kubernetes vulnerabilities, tracked as CVE-2023-3676, CVE-2023-3893, and CVE-2023-3955, could enable attackers to remotely execute code and take control of all Windows nodes in the Kubernetes cluster. The three flaws impact all…
-
"TikTok Fined $368m For Child Data Privacy Offenses"TikTok has recently been fined hundreds of millions of dollars after Ireland’s data protection regulator found it infringed the GDPR with regards to its processing of child users’ information. The Data Protection Commission (DPC) conducted a…
-
"Researchers Develop Adversarial Training Methods to Improve Machine Learning-Based Malware Detection Software"Machine Learning (ML) has changed how computer-related tasks are considered and performed. Its ability to identify patterns and process massive amounts of data lends itself to many applications. When it comes to malware detection, ML has streamlined a…
-
"LSU Computer Science Professor Leading Project to Increase Security in Federated Learning"Federated learning has garnered attention for its potential to bolster privacy, security, and efficacy across multiple industries. This technique is sometimes subjected to "critical learning" to improve its quality and robustness. However, during these…
-
"Cloud to Blame for Almost all Security Vulnerabilities"According to security researchers at Palo Alto Networks' Unit 42, four out of five (80.3%) security vulnerabilities observed in organizations across all sectors come from a cloud environment. In a newly published report, the researchers outlined…
-
"ChatGPT Jailbreaking Forums Proliferate in Dark Web Communities"The weaponization of generative Artificial Intelligence (AI) tools, such as ChatGPT, is taking shape. In online communities, threat actors are collaborating on new methods to circumvent ChatGPT's ethics rules, also known as "jailbreaking." Hackers are…
-
"New 'MetaStealer' Malware Targets Intel-Based macOS Systems"MetaStealer, a new malware designed to steal information from Intel-based macOS computers, has been discovered in the wild. MetaStealer, not to be confused with the 'META' information stealer malware that gained popularity last year, is a Go-based…
-
"Rust-Written 3AM Ransomware: A Sneak Peek into a New Malware Family"3AM is a new ransomware family that was detected in a single incident where an unidentified affiliate attempted to deliver LockBit, attributed to Bitwise Spider or Syrphid, to the target network but failed. According to the Symantec Threat Hunter Team,…
-
"Microsoft Teams Phishing: Enterprises Targeted by Ransomware Access Broker"A threat actor known for providing ransomware groups with initial access to enterprise systems has used Microsoft Teams to phish employees. According to Microsoft threat researchers, Storm-0324 likely relies on the publicly available TeamsPhisher tool…
-
"New Tool Skewers Socially Engineered Attack Ads"Online ads are often leveraged in personal cyberattacks, which can lead to the download of unwanted software and other malicious files. Researchers at the Georgia Institute of Technology are fighting deceptive online ads with an innovative solution…