News
-
"EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems"The US Environmental Protection Agency (EPA) released an alert highlighting cyber-protection measures for drinking water systems.
-
"GitHub Warns of SAML Auth Bypass Flaw in Enterprise Server"GitHub fixed a maximum severity authentication bypass vulnerability that affects GitHub Enterprise Server (GHES) instances using SAML Single Sign-On (SSO) authentication.
-
"Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users""CLOUD#REVERSER," a new attack campaign, uses Google Drive and Dropbox to stage malicious payloads.
-
"Authorities Arrest $100m Incognito Drugs Market Suspect"Rui-Siang Lin, a Taiwanese national, is facing multiple life sentences after being arrested on suspicion of owning and running one of the dark web’s most successful drugs marketplaces.
-
"Over 60% of Network Security Appliance Flaws Exploited as Zero Days"According to security researchers at Rapid7, over 60% of vulnerabilities discovered in network and security appliances in 2023 were exploited as zero days.
-
"Intel Discloses Max Severity Bug in Its AI Model Compression Software"Some versions of the Intel Neural Compressor software for Artificial Intelligence (AI) model compression have a maximum severity vulnerability.
-
"Cybercriminals Shift Tactics to Pressure More Victims Into Paying Ransoms"At-Bay reported a 64 percent increase in ransomware claims in the US in 2023. About 415 percent more "indirect" ransomware incidents occurred in 2023 than in 2022, driving this increase in ransomware claims.
-
"Vulnerability Found in Fluent Bit Utility Used by Major Cloud, Tech Companies"According to researchers at Tenable, the popular logging utility Fluent Bit, which several major companies use, has a critical vulnerability that could enable Denial-of-Service (DoS) attacks, information disclosure, and Remote Code Exec
-
"New BiBi Wiper Version Also Destroys the Disk Partition Table"A new version of "BiBi Wiper" malware deletes the disk partition table, making data restoration harder and prolonging victim downtime.
-
"Grandoreiro Banking Trojan Is Back and Targets Banks Worldwide"IBM X-Force warns of a new "Grandoreiro" banking Trojan campaign.
-
"AI Chatbots Highly Vulnerable to Jailbreaks, UK Researchers Find"Four popular generative Artificial Intelligence (AI) chatbots are vulnerable to basic jailbreak attempts, according to UK AI Safety Institute (AISI) researchers. The UK AISI conducted tests to assess cyber risks associated with these AI models.
-
"American Radio Relay League Hit by Cyberattack"The American Radio Relay League (ARRL) has recently been targeted in a cyberattack that resulted in service disruptions and possibly a data breach. The ARRL is the United States’ national association for amateur radio.