News
  • "Peugeot Leaks Access to User Information in South America"
    Stellantis' French automobile brand Peugeot exposed its customers in Peru, a South American country with a population of roughly 34 million. Although the country is not a particularly significant market for the automaker, this discovery is yet another…
  • "Critical Flaw Patched in VMware Workstation and Fusion"
    VMware has recently addressed multiple security vulnerabilities in its Workstation and Fusion products.  The vulnerabilities, identified as CVE-2023-20869, CVE-2023-20870, CVE-2023-20871, and CVE-2023-20872, have been privately reported to VMware…
  • "Alloy Taurus Hackers Update PingPull Malware to Target Linux Systems"
    Security researchers at Palo Alto Network's Unit 42 have observed the threat actor known as Alloy Taurus deploying a new variant of the PingPull malware targeting Linux systems.  The researchers believe Alloy Taurus is a Chinese advanced persistent…
  • "A Developer Exploited an API Flaw to Provide Free Access to GPT-4"
    Unconcerned with legal repercussions, a developer is attempting to reverse engineer Application Programming Interfaces (APIs) in order to provide free access to popular Artificial Intelligence (AI) models such as OpenAI's GPT-4. The developer's project…
  • "UK Cyber Pros Burnt Out and Overwhelmed"
    According to security researchers at Expel, over half (52%) of UK IT decision-makers (ITDMs) expect security team members to leave within the year due to burnout.  The researchers polled 500 ITDMs from organizations of all sizes for their study.…
  • "Quad Countries Prepare For Info Sharing on Critical Infrastructure"
    The Quadrilateral Security Dialogue (Quad) is working on a new information-sharing agreement that would help its four members improve cyber-resilience and their response to critical infrastructure (CNI) threats.  The four members of the group are…
  • SoS Musings #72 - Making the Move to Memory-Safe Programming Languages
    SoS Musings #72 - Making the Move to Memory-Safe Programming Languages
  • Cybersecurity Snapshots #41 - BlackCat Ransomware Group
    Cybersecurity Snapshots #41 - BlackCat Ransomware Group
  • "Making Emergency Calls More Secure"
    The National Science Foundation (NSF) has awarded a $1.2 million grant to a team of Michigan State University (MSU) researchers to continue enhancing the security of cellular 911 calls. Customers benefit from improved coverage and faster service as the…
  • Cyber Scene #79 - Tech Driving Geopolitics; Cyber at the Wheel
    Cyber Scene #79 - Tech Driving Geopolitics; Cyber at the Wheel  
  • "Charming Kitten's New BellaCiao Malware Discovered in Multi-Country Attacks"
    Charming Kitten is an Iranian nation-state group that has targeted multiple victims in the US, Europe, the Middle East, and India with a novel malware called BellaCiao. BellaCiao, discovered by Bitdefender Labs, is a "personalized dropper" capable of…
  • "Chinese Hackers Use New Linux Malware Variants for Espionage"
    In cyberespionage attacks, hackers are deploying new Linux malware variants, such as a new PingPull variant and a previously undocumented backdoor known as Sword2033. PingPull is a Remote Access Trojan (RAT) first identified by Unit 42 in espionage…