News
  • "$10.3 Billion in Cyber Crime Losses Shatters Previous Totals"
    The most recent FBI Internet Crime Report details over 800,000 cybercrime-related complaints filed in 2022. According to the report, total losses exceeded $10 billion, surpassing the $6.9 billion total for 2021, as reported by the FBI's Internet Crime…
  • "NSA and Co-Authors Recommend Best Practices to Secure Remote Access Software"
    Cybercriminals are using legitimate remote access software to gain access to victims' systems, blend in with regular network activity, and bypass detection. The National Security Agency (NSA), together with co-authors, released the "Guide to Securing…
  • "Three Vulnerabilities Discovered in Game Dev Tool RenderDoc"
    Three critical vulnerabilities have recently been discovered in RenderDoc, a graphics debugger that supports multiple operating systems, including Windows, Linux, Android, and Nintendo Switch.  The software holds a prominent position within the…
  • "Researchers Demonstrate Secure Information Transfer Using Spatial Correlations in Quantum Entangled Beams of Light"
    University of Oklahoma researchers led a study recently published in Science Advances that demonstrates using spatial correlations in quantum entangled light beams to encode information and enable its secure transmission. Light can be used to encode…
  • "North Korean Hackers Spoof Venture Capital Firms in Japan, Vietnam and US"
    According to new research, hackers based in North Korea are impersonating financial institutions and venture capital firms in the US, Vietnam, and Japan. Recorded Future's Insikt Group linked the campaign to APT38, a North Korea-sponsored group known for…
  • "KeePass Update Patches Vulnerability Exposing Master Password"
    Open source password manager KeePass has recently released an update to patch a vulnerability allowing attackers to retrieve the cleartext master password from a memory dump.  Tracked as CVE-2023-32784 and impacting KeePass 2.x versions, the issue…
  • "Google Patches Third Chrome Zero-Day of 2023"
    Google recently released a Chrome 114 security update that patches the third zero-day vulnerability found in the web browser in 2023.  Google said the latest version of Chrome patches two flaws, including CVE-2023-3079, a type confusion issue…
  • "UAlbany Research Looking for Cybersecurity Vulnerabilities"
    State University of New York (SUNY) at Albany (UAlbany) researchers have opened two new campus labs to explore the future of social media monitoring, digital forensics, and geospatial analysis, as well as the cybersecurity vulnerabilities of toys and…
  • "Cyclops Ransomware Gang Offers Go-Based Info Stealer to Cybercriminals"
    Cyclops ransomware-affiliated threat actors have been observed offering information stealer malware designed to extract sensitive data from infected hosts. According to Uptycs, the threat actor behind this Ransomware-as-a-Service (RaaS) promotes its…
  • "GIGABYTE Releases New Firmware to Fix Recently Disclosed Security Flaws"
    GIGABYTE has issued firmware updates to address security vulnerabilities in more than 270 motherboards that could be used to install malware. The firmware updates were released in response to a report by the hardware security company Eclypsium, which…
  • "Verizon 2023 Data Breach Investigations Report: 74% Of Breaches Involve Human Element"
    Verizon Business has released the results of its 16th annual Data Breach Investigations Report (2023 DBIR). The report analyzed 16,312 security incidents and 5,199 breaches, finding that ransomware costs are soaring. According to the report, the median…
  • "ChatGPT Hallucinations Open Developers to Supply Chain Malware Attacks"
    Researchers have found that attackers can exploit ChatGPT's proneness for returning false information to spread malicious code packages. This poses a significant threat to the software supply chain because it can allow malicious code and Trojans to be…