🚨 Attention #Cybersecurity Professionals!

Cybercriminals are exploiting identity vulnerabilities, causing data breaches & financial losses.

Join our exclusive WEBINAR to learn key tactics for defending against advanced identity-based threats

Join: https://thehackernews.com/2024/11/stop-lucr-3-attacks-learn-key-identity.html

🚨 Microsoft identifies the Chinese threat actor Storm-0940 using the Quad7 botnet for sophisticated password spray attacks.

Find details here: https://thehackernews.com/2024/11/microsoft-warns-of-chinese-botnet.html

⚠️ Researchers have uncovered EMERALDWHALE, a massive campaign exploiting exposed Git configurations to siphon over 15,000 credentials and clone 10,000 private repositories.

Read: https://thehackernews.com/2024/11/massive-git-config-breach-exposes-15000.html

🚨Cybersecurity at the Olympics: A New Threat Emerges! Learn about the evolving tactics of cyber groups like Emennet Pasargad and their implications for cybersecurity strategies.

Read: https://thehackernews.com/2024/11/inside-irans-cyber-playbook-ai-fake.html

🚨 SaaS Misconfigurations Are a Major Threat!

With so many apps and integrations, the risk of data breaches has never been higher. Here are 5 common misconfigurations you need to address NOW!

Read: https://thehackernews.com/2024/11/5-saas-misconfigurations-leading-to.html

🚨 A new Android malware, FakeCall, has emerged, utilizing sophisticated voice phishing (vishing) techniques to deceive users.

This malware can capture SMS, contacts, and stream live video, redirecting calls to fraudulent sources.

Read: https://thehackernews.com/2024/11/new-fakecall-malware-variant-hijacks.html

Google's AI framework, 🤖 Big Sleep, discovers a zero-day vulnerability in the widely used SQLite database engine, demonstrating the future of automated vulnerability detection.

Learn more: https://thehackernews.com/2024/11/googles-ai-tool-big-sleep-finds-zero.html

🎄🎁🤖 As retail traffic surges this holiday season, AI-driven threats are expected to spike.

Discover how "Grinch bots" are impacting the retail industry and strategies to enhance bot detection for a seamless holiday shopping experience.

https://thehackernews.com/2024/11/cyber-threats-that-could-impact-retail.html

German law enforcement has disrupted the criminal service dstat[.]cc, enabling easy DDoS attacks for non-technical users.

Find details here: https://thehackernews.com/2024/11/german-police-disrupt-ddos-for-hire.html

⚠️ Six critical security flaws have been discovered in the Ollama AI framework, enabling potential model poisoning and theft. With a staggering number of unpatched instances, it’s crucial to filter internet-facing endpoints effectively.

Read: https://thehackernews.com/2024/11/critical-flaws-in-ollama-ai-framework.html

💻 Don't miss out on our latest #cybersecurity newsletter!

This week, we're diving into the chaos as hackers ramp up attacks, including North Korean ransomware collaboration and evasive password spraying tactics.

https://thehackernews.com/2024/11/thn-recap-top-cybersecurity-threats.html

Google warns of active exploitation of CVE-2024-43093 in Android.

This #vulnerability allows unauthorized access to critical directories, emphasizing the need for timely updates and patching processes.

https://thehackernews.com/2024/11/google-warns-of-actively-exploited-cve.html

Synology has released a patch for a critical zero-day vulnerability (CVE-2024-10443) affecting millions of NAS devices, which allows remote code execution without user interaction.

Read: https://thehackernews.com/2024/11/synology-urges-patch-for-critical-zero.html

🚨 Hundreds of typosquatted versions targeting npm developers are attempting to deliver cross-platform #malware by employing Ethereum smart contracts for command-and-control (C2) communications.

Read: https://thehackernews.com/2024/11/malware-campaign-uses-ethereum-smart.html

The Android banking malware "ToxicPanda" has infected over 1,500 devices, facilitating fraudulent transactions by bypassing security measures.

It disguises itself as legitimate apps and intercepts OTPs for unauthorized access.

Read: https://thehackernews.com/2024/11/new-android-banking-malware-toxicpanda.html

Explore how Zero Trust security transforms #cybersecurity by eliminating implicit trust, scrutinizing access requests, and continuously monitoring users to mitigate insider threats and enhance security posture.

Read: https://thehackernews.com/2024/11/leveraging-wazuh-for-zero-trust-security.html

The FBI is seeking public assistance to identify those behind cyber intrusions linked to Chinese APT groups that have exploited vulnerabilities in edge devices and networks for cyber espionage against critical infrastructure.

Learn more: https://thehackernews.com/2024/11/fbi-seeks-public-help-to-identify.html

Qualcomm Snapdragon 8 Gen 5 will be clocked at 5GHz

The Snapdragon 8 Elite 2 or the 8 Gen 5, codenamed "kaanapali" (SM-8850) will keep its predecessor's 2+6 configuration & will be manufactured by TSMC on its 3nm node. However, its P-cores will be clocked at 5.0 GHz, while the E-cores will operate at 4.0 GHz. Snapdragon 8 Gen 4 has its P-cores running at 4.32GHz (AB version) and E-cores at 3.53GHz

The single-core of 8 Gen 5 is expected to be above 4,000 scores in Geekbench 6. However, acc to rumours, 8 Gen 5 will likely be a minor revision while the Snapdragon 8 Gen 6 is expected to get some big boost.

Follow @TechLeaksZone

BREAKING: Google Tensor G4 Spotted on Geekbench with PowerVR GPU

In a surprising twist, an early prototype of the Tensor G4 with a PowerVR GPU instead of Mali-G715 graphics has arrived on Geekbench. Many people assumed that its the Tensor G5, but in reality its a very early tensor G4 prototype to test and compile tensor new GPU drivers ahead of it final build.

According to some Google AOSP Dev, those chip on Geekbench are just basically tensor G4 with a different NPU under TSMC. So this is just a prototype for Google and Imagination developers to test and optimize the new drivers for the IMG DXT GPU. For the Tensor G5, Google has NOT even finalized the SoC core layout yet (especially the NPU).

Follow @TechLeaksZone

Xiaomi Successfully Taped Out China's First 3nm Smartphone SoC

According to Beijing Satellite TV on October 20, Tang Jianguo, Chief Economist of the Beijing Municipal Bureau of Economy and Information Technology, said that Xiaomi has successfully taped out the country's first 3nm mobile phone system-level chip.

Tape-out is basically the final stage of the design process before it is sent for mass production. So it is possible that Xiaomi will launch its own 3nm chipset next year. Acc to rumours, it will perform similar to Snapdragon 8+ Gen 1 & would have a 5G modem from UNISOC. It would be manufactured by TSMC on its 3nm node.

Last time Xiaomi made it's own SoC was in 2017 with the Mi 5C which was powered by Xiaomi Pengpai S1 chipset. This was an octa-core SoC manufactured on a 28nm process, with the big core running at 2.2GHz and equipped with a Mali T860 quad-core GPU.

Follow @TechLeaksZone