News
  • "Organizations Struggle to Manage OT Security Risks"

    According to a new survey conducted by OTORIO and ServiceNow, 58 percent of organizations consider their Operational Technology (OT) cybersecurity risk as high or critical. However, according to the survey of 200 Information Technology (IT) and OT…

  • "Uber Drivers' Data Exposed in Breach of Law Firm's Servers"

    A mid-sized law firm representing Uber has recently notified an unknown number of its drivers that sensitive data has been exposed and stolen due to a cyberattack.  New Jersey-based Genova Burns disclosed the breach in an email to customers.  …

  • "New Cyber Software Can Verify How Much Knowledge AI Really Knows"

    As a result of the developing global interest in generative Artificial Intelligence (AI) systems, University of Surrey researchers have developed software that can verify how much information an AI gathered from an organization's digital database. As…

  • "Simulating a Secure Future"

    According to Rajat Kumar, a Ph.D. student in Yehia Massoud's lab at King Abdullah University of Science and Technology (KAUST), it is not inconceivable for a malicious employee of a company that implants chips in about 50 percent of the world's computers…

  • "Android’s April 2023 Updates Patch Critical Remote Code Execution Vulnerabilities"

    Google recently announced the April 2023 security updates for Android devices, with patches for over 65 vulnerabilities, including two critical bugs leading to remote code execution (RCE).  Google’s Android security bulletin for April 2023 describes…

  • "Chrome 112 Patches 16 Security Flaws"

    Google recently announced the release of Chrome 112 in the stable channel with patches for 16 vulnerabilities, including 14 reported by external researchers.  Of the externally reported flaws, two are rated high severity, nine have a medium severity…

  • "Tax Return Filing Service eFile.com Caught Serving Malware"

    eFile[.]com, an online service that helps individuals file tax returns, was recently injected with malicious code that led to malware being delivered to visitors.  The software service, which is authorized by the Internal Revenue Service (IRS),…

  • "Typhon Info-Stealing Malware Devs Upgrade Evasion Capabilities"

    The creators of the Typhon information-stealing malware claimed on a dark web forum that they had updated the malware to a new version, which they now market as "Typhon Reborn V2." They revealed improvements intended to prevent analysis via anti-…

  • "Operation Cookie Monster: Genesis Market Seized by FBI"

    The FBI has shut down its second cybercriminal forum of the year. The Genesis Market, known and used by hackers worldwide, has been seized in the global sting called Operation Cookie Monster. In the hacker community, Genesis Market is an invitation-only…

  • "CryptoClippy: New Clipper Malware Targeting Portuguese Cryptocurrency Users"

    CryptoClippy, a new malware capable of stealing cryptocurrency, is currently targeting Portuguese users as part of a malvertising campaign. The activity involves Search Engine Optimization (SEO) poisoning techniques to lure people searching for "WhatsApp…

  • "Resecurity Uncovers STYX, New Cybercriminal Platform Focused on Financial Fraud"

    New research by Resecurity has uncovered the STYX Innovation Marketplace, a new cybercriminal e-commerce platform with a focus on financial fraud and money laundering. STYX was introduced at the start of 2023, providing cybercriminals with various…

  • "Researcher Tricks ChatGPT Into Building Undetectable Steganography Malware"

    A security researcher has tricked ChatGPT into creating sophisticated data-stealing malware that signature- and behavior-based detection tools will be unable to identify, evading the chatbot's anti-malicious-use protections. Without writing code, the…