News
-
"Can Online Voting Be Secure? Experts in Las Vegas Try to Hack New Platform"Cybersecurity professionals are testing their skills against a new online voting platform called Secure Internet Voting (SIV) to explore potential security vulnerabilities in the next generation of election systems.
-
"New Phishing Attack Uses Sophisticated Infostealer Malware"Security researchers at Barracuda Networks have discovered a new sophisticated phishing attack featuring a stealthy infostealer malware that exfiltrates a wide range of sensitive data.
-
"DDoS Attacks Surge 46% in First Half of 2024, Gcore Report Reveals"The "Gcore Radar Report" for the first half of 2024 details Distributed Denial-of-Service (DDoS) attack data, showing attack patterns and cyber threats. According to the report, DDoS attacks increased 46 percent in the first half of 2024 to 445K.
-
"Browser Backdoors: Securing the New Frontline of Shadow IT"In a study, researchers from Stanford University and the CISPA Helmholtz Center for Information Security highlighted that over the past three years, 280 million Chrome extension installs contained malware.
-
"High-Risk Cloud Exposures Surge Due to Rapid Service Growth"According to a new report from Palo Alto Networks' Unit 42, organizations are introducing over 300 new services monthly, making up about 32 percent of high or critical cloud exposures.
-
"Azure Health Bot Service Vulnerabilities Possibly Exposed Sensitive Data"Tenable researchers found vulnerabilities in Microsoft's Azure Health Bot Service that threat actors could have used to access sensitive data.
-
"Phishing Campaign Compromises 100+ Ukrainian Government Computers"The Computer Emergency Response Team of Ukraine (CERT-UA) recently announced that more than 100 Ukrainian government computers have been compromised following a mass phishing campaign.
-
"GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks"A team of researchers from Germany's CISPA Helmholtz Center for Information Security discovered an architectural flaw, codenamed "GhostWrite," affecting the Chinese chip company T-Head's XuanTie C910 and C920 RISC-V CPUs.
-
"Carnegie Mellon's Hacking Team Wins Third Straight, Record Eighth Overall DEF CON Capture-the-Flag Title"The most successful team in DEF CON's Capture-the-Flag (CTF) competition history, Carnegie Mellon University's (CMU) "Plaid Parliament of Pwning" (PPP), won its third consecutive title, earning its eighth victory.
-
"35% of Exposed API Keys Still Active, Posing Major Security Risks"The company Nightfall AI found that secrets such as passwords and Application Programming Interface (API) keys were most often found in GitHub. Every year, about 350 total secrets are exposed per 100 employees.
-
"Hackers Leak 2.7 Billion Data Records With Social Security Numbers"Nearly 2.7 billion records of personal information for people in the US were leaked on a popular hacking forum. The records include names, Social Security numbers (SSNs), known physical addresses, and more.
-
"Adobe Calls Attention to Massive Batch of Code Execution Flaws"Adobe recently released fixes for 72 security vulnerabilities across multiple products and warned that Windows and macOS users are at risk of code execution, memory leaks, and denial-of-service attacks.