News
  • "Minecraft Servers Under Attack: Microsoft Warns About Cross-Platform DDoS Botnet"
    Microsoft has identified a cross-platform botnet aimed primarily at performing Distributed Denial-of-Service (DDoS) attacks against private Minecraft servers. The MCCrash botnet is distinguished by a novel spreading method that allows it to spread to…
  • "NIST Retires SHA-1 Cryptographic Algorithm"
    According to security specialists at the National Institute of Standards and Technology (NIST), the SHA-1 algorithm, one of the first widely used techniques for securing electronic information, has reached the end of its useful life. The agency is now…
  • "Executives Take More Cybersecurity Risks Than Office Workers"
    Ivanti collaborated with cybersecurity experts and polled 6,500 executive leaders, cybersecurity professionals, and office workers to better understand current cybersecurity threat perception and how businesses are preparing for future threats. According…
  • "Blackmailing MoneyMonger Malware Hides in Flutter Mobile Apps"
    MoneyMonger, an Android malware campaign, was discovered hidden in money-lending apps created with Flutter. According to research conducted by the Zimperium zLabs team, the malware leverages multiple levels of social engineering to exploit its victims…
  • "Rust Software Security: A Current State Assessment"
    Rust is an increasingly popular programming language. Although its user base remains small, it is considered a good language. For seven consecutive years, according to the Stack Overflow Developer Survey 2022, Rust has been the most-loved programming…
  • "How ChatGPT Can Turn Anyone Into a Ransomware and Malware Threat Actor"
    Since OpenAI's launch of ChatGPT, commentators have expressed concern about the impact Artificial Intelligence (AI)-driven content creation will have on cybersecurity. Many researchers are concerned that generative AI solutions will make cybercrime more…
  • "Spafford wins ACSAC Cybersecurity Artifacts Competition and Impact Award"
    Professor Eugene H. Spafford earned the Annual Computer Security Applications Conference (ACSAC) 2022 Cybersecurity Artifacts Competition Impactful System Award for his artifact Tripwire: Integrity Scanning as Intrusion Detection. The selection of…
  • "Phishing Scams Are Coming to Town"
    The Christmas season is a busy time for phishers. According to Check Point research, 17 percent of all malicious files distributed via email in November were related to orders and shipping during the Black Friday holiday season, which is expected to…
  • "CISA Warns Veeam Backup & Replication Vulnerabilities Exploited in Attacks"
    The US Cybersecurity and Infrastructure Security Agency (CISA) has recently added two flaws affecting Veeam's Backup & Replication product to its Known Exploited Vulnerabilities Catalog.  CISA added five flaws to its catalog on Tuesday,…
  • "Unsecure Bricks: API Vulnerabilities Found in Lego BrickLink Marketplace"
    Most people associate Lego with toy bricks and childhood imagination, but the Lego company has now entered the digital age by offering a service called BrickLink, which has been discovered to be insecure. A new report from Salt Security reveals the…
  • "GAO Highlights Interoperability Challenges With Zero Trust"
    According to a Government Accountability Office (GAO) briefing document aimed at lawmakers, many federal agencies will find it difficult to design zero trust systems because the various products required to fully realize the strategy do not always…
  • "Social Blade Admits to Being Hacked"
    The popular data analytics company Social Blade has admitted to being hacked. Social Blade offers a data analytics tool based in the US that tracks social media platforms such as YouTube, Facebook, Twitter, and TikTok. The company claims to have seven…