Latest Cybersecurity News and Articles
25 April 2023
Google's cloud division is following in the footsteps of Microsoft with the launch of Security AI Workbench that leverages generative AI models to gain better visibility into the threat landscape.
Powering the cybersecurity suite is Sec-PaLM, a specialized large language model (LLM) that's "fine-tuned for security use cases."
The idea is to take advantage of the latest advances in AI to augment
25 April 2023
Information sharing between U.S. Cyber Command and the CISA at the Department of Homeland Security stopped several potentially disastrous cyberattacks, including a suspected Iranian attack against American elections.
25 April 2023
Organized at the CCDCOE in Estonia for more than a decade, the exercise tests participants’ ability to defend systems against real-time attacks, handle incident reporting, and solve challenges related to forensics, the media, and legal issues.
25 April 2023
A Chinese and a Hong Kong national are each under U.S. federal indictment for money laundering for their roles in channeling cryptocurrency stolen by North Korean hackers into hard currency and goods.
25 April 2023
As some KuCoin users pointed out on social media, the scammers set up a convincing campaign similar to the platform's regular promotional events, so it was easy for them to get fooled.
25 April 2023
Established in partnership with One In Tech, an ISACA Foundation, the initiative will support individuals who are currently underrepresented in the industry by ensuring equitable access and advancements within cybersecurity and tech careers.
25 April 2023
The cybersecurity firm Horizon3 disclosed details of the flaw along with a PoC exploit code for CVE-2023-27350. The PoC code allows attackers to bypass authentication and execute code on vulnerable PaperCut servers.
25 April 2023
Search giant Google on Monday unveiled a major update to its 12-year-old Authenticator app for Android and iOS with an account synchronization option that allows users to back up their time-based one-time passwords (TOTPs) codes to the cloud.
"This change means users are better protected from lockout and that services can rely on users retaining access, increasing both convenience and security,"
24 April 2023
In this edited interview excerpt from The Women in Technology Podcast, Check Point Global Cyber Security Warrior and Evangelist Micki Boland speaks with Becky Schneider about cyber security, technology integration, the intrapreneureal spirit and so much more. Don’t miss this! And if you like what you read, please check out the full podcast. Tell us […]
The post Cyber security technology integration, intrapreneurship & beyond appeared first on CyberTalk.
24 April 2023
Researchers found 8220 Gang exploiting the Log4Shell vulnerability to install CoinMiner in VMware Horizon servers of Korean energy-related companies. The gang uses a PowerShell script to download ScrubCrypt and establish persistence by making edits to the registry entries. System administrators are advised to verify whether their existing VMware servers are susceptible and apply the latest patches.
24 April 2023
The Play ransomware group has added two custom tools written in .NET to expand the effectiveness of its attacks. Named Grixba and Volume Shadow Copy Service (VSS), these tools enable attackers to keep track of users in compromised networks and gather information about security, backup, and remote administration software.
24 April 2023
The Blind Eagle cyberespionage group was identified as the source of a new multi-stage attack chain that ultimately results in the deployment of NjRAT on compromised systems. In this attack campaign, Blind Eagle leverages social engineering, custom malware, and spear-phishing attacks. Therefore, upgrade your security posture to stay safe. Moreover, training employees on how to detect phishing emails is much recommended.
24 April 2023
Sophos X-Ops uncovered a defense evasion tool called AuKill. The tool exploits an outdated version of the driver used by version 16.32 of the Microsoft utility Process Explorer to disable EDR processes to deploy either a backdoor or ransomware on the targeted system. Since the beginning of 2023, the tool has been used to drop Medusa Locker and LockBit ransomware strains.
24 April 2023
Because of the risk of mag stripes being read and copied, Spain will begin replacing existing credit cards with fingerprint biometrics cards in 2024.
24 April 2023
Microsoft connected the Iranian Mint Sandstorm APT group (aka PHOSPHORUS) to a wave of attacks, between late-2021 and mid-2022, targeting the U.S. critical infrastructure. The group targets private/public organizations, including activists, journalists, the Defense Industrial Base (DIB), political dissidents, and employees from various government agencies.
24 April 2023
The security of workplace devices and applications remains a growing concern within hybrid and remote environments, according to new research.
24 April 2023
Singapore and France have announced plans to set up a research facility to jointly develop artificial intelligence (AI) capabilities that can be applied in cyber defense.
24 April 2023
At the beginning of March, ReversingLabs researchers encountered a malicious package on the Python Package Index (PyPI) named termcolour, a three-stage downloader published in multiple versions.
24 April 2023
Dubbed RustBucket and able to fetch additional payloads from its command-and-control (C&C) server, the malware has been attributed to the APT actor BlueNoroff, which is believed to be a subgroup of the infamous Lazarus hacking group.
24 April 2023
Since the generative artificial intelligence chatbot was released in November, Palo Alto Networks’ Unit 42 has detected up to 118 malicious URLs related to ChatGPT daily and domain squatting related to the tool has surged 17,818%.