Researchers Uncover Vulnerabilities in Open-Source AI and ML Models
A little over three dozen security vulnerabilities have been disclosed in various open-source artificial intelligence (AI) and machine learning (ML)...
News
A Sherlock Holmes Approach to Cybersecurity: Eliminate the Impossible with Exposure Validation
Sherlock Holmes is famous for his incredible ability to sort through mounds of information; he removes the irrelevant and exposes...
Dutch Police Disrupt Major Info Stealers RedLine and MetaStealer in Operation Magnus
The Dutch National Police, along with international partners, have announced the disruption of the infrastructure powering two information stealers tracked...
U.S. Government Issues New TLP Guidance for Cross-Sector Threat Intelligence Sharing
The U.S. government (USG) has issued new guidance governing the use of the Traffic Light Protocol (TLP) to handle the...
New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors
More than six years after the Spectre security flaw impacting modern CPU processors came to light, new research has found...
Job Scams Exploiting Financial Vulnerability: A Growing Threat
Job scams exploiting financially vulnerable individuals have surged recently, raising concerns among cybersecurity experts at Proofpoint. A surge in online...
Pwn2Own Ireland Reveals Over 70 Zero-Day Vulnerabilities
At Pwn2Own Ireland, participants uncovered more than 70 zero-day vulnerabilities, with significant implications for cybersecurity and user safety. A team...
CloudScout Toolset by Evasive Panda: Targeting Taiwan’s Institutions
The CloudScout toolset, developed by the cyber threat group Evasive Panda, is specifically designed to infiltrate Taiwanese institutions and extract...
Russian Malware Campaign Targeting Ukrainian Recruits Via Telegram: Insights and Implications
In a concerning development, a malware campaign targeting Ukrainian military recruits has emerged, delivered through Telegram by Russian threat actors....
Manufacturers Targeted by Rising AI-Powered BEC Scams
Business Email Compromise (BEC) scams are increasingly targeting manufacturers, representing a significant portion of phishing attempts. Recent analysis reveals alarming...
US-CERT Vulnerability Summary for the Week of October 21, 2024
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and...
Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services
A government entity and a religious organization in Taiwan were the target of a China-linked threat actor known as Evasive...
Russian Espionage Group Targets Ukrainian Military with Malware via Telegram
A suspected Russian hybrid espionage and influence operation has been observed delivering a mix of Windows and Android malware to...
Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials
Cybersecurity researchers have warned of a spike in phishing pages created using a website builder tool called Webflow, as threat...
BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers
Three malicious packages published to the npm registry in September 2024 have been found to contain a known malware called...
Sailing the Seven Seas Securely from Port to Port – OT Access Security for Ships and Cranes
Operational Technology (OT) security has affected marine vessel and port operators, since both ships and industrial cranes are being digitalized...
THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 – Oct 27)
Cybersecurity news can sometimes feel like a never-ending horror movie, can't it? Just when you think the villains are locked...
Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel
A new attack technique could be used to bypass Microsoft's Driver Signature Enforcement (DSE) on fully patched Windows systems, leading...
Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining
The infamous cryptojacking group known as TeamTNT appears to be readying for a new large-scale campaign targeting cloud-native environments for...
Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions
Four members of the now-defunct REvil ransomware operation have been sentenced to several years in prison in Russia, marking one...
CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities
The Computer Emergency Response Team of Ukraine (CERT-UA) has detailed a new malicious email campaign targeting government agencies, enterprises, and...
SEC Charges 4 Companies Over Misleading SolarWinds Cyber Attack Disclosures
The U.S. Securities and Exchange Commission (SEC) has charged four current and former public companies for making "materially misleading disclosures"...
UK Government Promotes Cyber Essentials Certification for Enhanced Cybersecurity
The UK government is actively encouraging organizations to achieve Cyber Essentials Certification, emphasizing the significant benefits it offers in safeguarding...
AI Policy Development Ignoring Cybersecurity Teams: A Critical Concern
Cybersecurity teams are facing exclusion from AI policy development in enterprises, as revealed by recent research from ISACA at its...
