News
  • "Surge in Compromised Credentials Highlights Rampant Cyber Hygiene Failings"
    Security experts are warning over the significant growth in exposed account passwords after a repository of compromised credentials surpassed five billion records. This month, Authlogics, a UK-based provider of password security technologies for…
  • "New CISA Tool Detects Hacking Activity in Microsoft Cloud Services"
    The US Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) has released a new open-source incident response tool to help detect malicious activity in Microsoft cloud environments. This Python-based utility, known as the…
  • "MITRE Rolls Out Supply Chain Security Prototype"
    MITRE has launched a prototype cloud-based platform for its new System of Trust (SoT) framework, which identifies and quantifies supply chain risks and cybersecurity concerns. Organizations can now use the Risk Model Manager (RMM) platform to assess…
  • "North Korean APT Group 'Kimsuky' Targeting Experts with New Spear-Phishing Campaign"
    German and South Korean government agencies have issued a warning about a new spear-phishing campaign launched by the Kimsuky North Korean Advanced Persistent Threat (APT) group against experts on the peninsula. The campaign gains access to victims'…
  • "Okta Passwords at Risk, New Research Shows"
    Okta is one of the leading providers of authentication services and Identity and Access Management (IAM) systems, with a net worth of $13.6 billion and over 17,000 customers worldwide. However, the cloud incident response company Mitiga has discovered a…
  • "Fake ChatGPT for Google Extension Hijacks Facebook Accounts"
    Guardio Labs researchers discovered that a new Chrome extension that promises to enhance users' Google searches with ChatGPT also leads to compromised Facebook accounts. While this method is not new, the extension worked as claimed. The Artificial…
  • "Researchers Uncover Chinese Nation State Hackers' Deceptive Attack Strategies"
    A recent Earth Preta campaign reveals that China-aligned nation-state groups are becoming increasingly skilled at circumventing security systems. Since at least 2012, the broader cybersecurity community has tracked the threat actor under the names Bronze…
  • "Getting Ahead of the Ransomware Epidemic: CISA's Pre-Ransomware Notifications Help Organizations Stop Attacks Before Damage Occurs"
    The US Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) recently launched a significant initiative to help organizations fix vulnerabilities targeted by ransomware actors more quickly. CISA has now announced the "Pre…
  • "A Breakthrough in Security for Decentralized Multi-Robot Systems"
    Researchers from Boston University and Northeastern University are developing security algorithms for Multi-Robot Systems (MRS). Recently, the team published a paper titled "Byzantine Resilience At Swarm-Scale: A Decentralized Blocklist Protocol From…
  • "Chrome 111 Update Patches High-Severity Vulnerabilities"
    Google recently announced a Chrome 111 update that brings patches for eight vulnerabilities, including seven flaws that were reported by external researchers.  All seven externally reported issues are high-severity memory safety bugs, with four…
  • "Irish Food Giant Dole Admits Employee Data Breach"
    A fresh produce multinational based in Ireland has revealed that employee data was compromised in a ransomware breach that hit the firm in February.  Dole employs nearly 38,000 staff across 30 countries and posted revenue of $9.2bn last year, making…
  • "ChatGPT Flaw Exposed Users' Chat Histories"
    OpenAI has fixed a ChatGPT flaw, which the company's CEO Sam Altman described as a "significant issue." The vulnerability allowed users to see parts of other users' conversations with the Artificial Intelligence (AI)-driven chatbot. A user concerned that…