📔 Company Fined $1m for Fake Joe Biden AI Calls 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
FCC charges Lingo Telecom with 1m fine over voice deepfake during the 2024 New Hampshire primary election.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Company Fined $1m for Fake Joe Biden AI Calls
FCC charges Lingo Telecom with $1m fine over voice deepfake during the 2024 New Hampshire primary election
🦅 New Cheana Stealer Targets VPN Users Across Multiple Operating Systems 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Key takeaways Cyble Research and Intelligence Lab CRIL has identified a phishing site impersonating a VPN provider. The site specifically targets individuals downloading Virtual Private Network VPN applications for Windows, Linux, and macOS. The Threat Actor TA has created distinct binaries for each platformWindows, Linux, and macOStargeting users across these systems. The Windows version of the stealer targets cryptocurrencyrelated browser extensions, standalone crypto wallets, and stored browser passwords. The Linux Version of the stealer Focuses on cryptocurrency browser extensions, standalone crypto wallets, browser login data, cookies, and SSH keys. In addition to cryptocurrency browser extensions and crypto wallets, MacOS version steals browser login data...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Cheana Stealer Targets VPN Users On Multiple OS
Cyble uncovers Cheana Stealer malware via a phishing site impersonating a VPN, targeting Windows, Linux, and macOS users for sensitive data theft.
🦅 Comprehensive Analysis of Critical Vulnerabilities in Atlassian Products 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Key Takeaways CERTIn's August 2024 bulletin emphasizes the urgent need for organizations to update their Atlassian products due to critical vulnerabilities. Prompt patch application is essential to address these highseverity issues and mitigate risks. The vulnerabilities uncovered span a range of severe risks, including arbitrary code execution, crosssite scripting XSS, and privilege escalation. These affect multiple Atlassian products, such as Bamboo, Confluence, and Jira, posing significant security threats. Critical vulnerabilities are linked to specific versions of Atlassian software Bamboo versions prior to 9.6.5, Confluence versions before 8.9.5, Crowd versions below 5.3.2, Jira versions older than 9.17.1, and Jira Service Management versions before 5.17.1. No...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Comprehensive Analysis Of Critical Vulnerabilities In Atlassian Products - Cyble
CERT-In's August 2024 bulletin reveals critical vulnerabilities in Atlassian products like Bamboo and Confluence, detailing high-severity risks and mitigation strategies.
🪖 Implementation Challenges in Privacy-Preserving Federated Learning 🪖
📖 Read more.
🔗 Via "NIST"
----------
👁️ Seen on @cibsecurity
In this post, we talk with Dr. Xiaowei Huang and Dr. Yi Dong University of Liverpool, Dr. Mat Weldon United Kingdom UK Office of National Statistics ONS, and Dr. Michael Fenton Trata who were winners in the UKUS PrivacyEnhancing Technologies PETs Prize Challenges. We discuss implementation challenges of privacypreserving federated learning PPFL specifically, the areas of threat modeling and real world deployments. Threat Modeling In research on privacypreserving federated learning PPFL, the protections of a PPFL system are usually encoded in a threat model that defines.📖 Read more.
🔗 Via "NIST"
----------
👁️ Seen on @cibsecurity
NIST
Implementation Challenges in Privacy-Preserving Federated Learning
In this post, we talk with Dr.
🛠 UFONet 1.9 🛠
📖 Read more.
🔗 Via "Packet Storm - Tools"
----------
👁️ Seen on @cibsecurity
UFONet abuses OSI Layer 7HTTP to createmanage 'zombies' and to conduct different attacks using GETPOST, multithreading, proxies, origin spoofing methods, cache evasion techniques, etc.📖 Read more.
🔗 Via "Packet Storm - Tools"
----------
👁️ Seen on @cibsecurity
packetstorm.news
Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers
♟️ Local Networks Go Global When Domain Names Collide ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
The proliferation of new toplevel domains TLDs has exacerbated a wellknown security weakness Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn't exist at the time. Meaning, they are continuously sending their Windows usernames and passwords to domain names they do not control and which are freely available for anyone to register. Here's a look at one security researcher's efforts to map and shrink the size of this insidious problem.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
Local Networks Go Global When Domain Names Collide
The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn't exist at the time. Meaning, they are…
🧠 How Paris Olympic authorities battled cyberattacks, and won gold 🧠
📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
The Olympic Games Paris 2024 was by most accounts a highly successful Olympics. Some 10,000 athletes from 204 nations competed in 329 events over 16 days. But before and during the event, authorities battled Olympicsize cybersecurity threats coming from multiple directions. In preparation for expected attacks, authorities took several proactive measures to ensure the security The post How Paris Olympic authorities battled cyberattacks, and won gold appeared first on Security Intelligence.📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
Security Intelligence
How Paris Olympic authorities battled cyberattacks, and won gold
Before and during the 2024 Paris Olympics, authorities faced cybersecurity threats from a wide number of vectors. Here's how their defenses held up.
🖋️ New PEAKLIGHT Dropper Deployed in Attacks Targeting Windows with Malicious Movie Downloads 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have uncovered a neverbeforeseen dropper that serves as a conduit to launch nextstage malware with the ultimate goal of infecting Windows systems with information stealers and loaders. "This memoryonly dropper decrypts and executes a PowerShellbased downloader," Googleowned Mandiant said. "This PowerShellbased downloader is being tracked as PEAKLIGHT." Some of.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Webinar: Experience the Power of a Must-Have All-in-One Cybersecurity Platform 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Let's be honest. The world of cybersecurity feels like a constant war zone. You're bombarded by threats, scrambling to keep up with patches, and drowning in an endless flood of alerts. It's exhausting, isnt it? But what if there was a better way? Imagine having every essential cybersecurity tool at your fingertips, all within a single, intuitive platform, backed by expert support 247. This is.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Focus on What Matters Most: Exposure Management and Your Attack Surface 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Read the full article for key points from Intruders VP of Product, Andy Hornegolds recent talk on exposure management. If youd like to hear Andys insights firsthand, watch Intruders ondemand webinar. To learn more about reducing your attack surface, reach out to their team today. Attack surface management vs exposure management Attack surface management ASM is the ongoing.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ New Qilin Ransomware Attack Uses VPN Credentials, Steals Chrome Data 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The threat actors behind a recently observed Qilin ransomware attack have stolen credentials stored in Google Chrome browsers on a small set of compromised endpoints. The use of credential harvesting in connection with a ransomware infection marks an unusual twist, and one that could have cascading consequences, cybersecurity firm Sophos said in a Thursday report. The attack, detected in July.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🚀 NGate Android malware relays NFC traffic to steal cash 🚀
📖 Read more.
🔗 Via "ESET - WeLiveSecurity"
----------
👁️ Seen on @cibsecurity
Android malware discovered by ESET Research relays NFC data from victims payment cards, via victims mobile phones, to the device of a perpetrator waiting at an ATM.📖 Read more.
🔗 Via "ESET - WeLiveSecurity"
----------
👁️ Seen on @cibsecurity
Welivesecurity
NGate Android malware relays NFC traffic to steal cash
ESET Research uncovers Android malware that relays NFC data from victims’ payment cards, via victims’ mobile phones, to the device of a perpetrator waiting at an ATM.
📔 Georgia Tech Sued Over Cybersecurity Violations 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The US government has filed a lawsuit against Georgia Tech for alleged cybersecurity violations as a Department of Defense contractor.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Georgia Tech Sued Over Cybersecurity Violations
The US government has filed a lawsuit against Georgia Tech for alleged cybersecurity violations as a Department of Defense contractor
📔 Qilin Caught Red-Handed Stealing Credentials in Google Chrome 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Browser credential harvesting is an unusual activity for a ransomware group.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Qilin Caught Red-Handed Stealing Credentials in Google Chrome
Browser credential harvesting is an unusual activity for a ransomware group
📔 YouTube Launches AI Tool to Recover Hacked Accounts 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
YouTubes new AI troubleshooting tool is designed to help users recover and secure their accounts after theyve been hacked.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
YouTube Launches AI Tool to Recover Hacked Accounts
YouTube’s new AI troubleshooting tool is designed to help users recover and secure their accounts after they’ve been hacked
📔 Liverpool Fans Lose Big in Premier League Ticket Scams 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Liverpool fans were the most frequent and highestvalue targets for ticket scams last season, losing over 17,000 to fraudsters.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Liverpool Fans Lose Big in Premier League Ticket Scams
Liverpool fans were the most frequent and highest-value targets for ticket scams last season, losing over £17,000 to fraudsters
🦿 Cybercriminals Deploy New Malware to Steal Data via Android’s Near Field Communication (NFC) 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
A new malware called NGate allows cybercriminals to steal near field communication data from Android phones via sophisticated social engineering. The data is relayed to the fraudsters before being used to steal cash.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Cybercriminals Deploy New Malware to Steal Data via Android’s Near Field Communication (NFC)
Malware called NGate allows criminals to steal near field communication data from Android phones. The data is sent to the fraudsters before being used to steal cash.
🕵️♂️ Constantly Evolving MoonPeak RAT Linked to North Korean Spying 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The malware is a customized variant of the powerful open source XenoRAT information stealing malware often deployed by Kimsuky and other DPRK APTs.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Constantly Evolving MoonPeak RAT Linked to North Korean Spying
The malware is a customized variant of the powerful open source XenoRAT information stealing malware often deployed by Kimsuky and other DPRK APTs.
🕵️♂️ NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The release of new NIST quantumproof cryptography standards signals it's time for cybersecurity teams to get serious about preparing for the rise of quantum threats.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams
The release of new NIST quantum-proof cryptography standards signals it's time for cybersecurity teams to get serious about preparing for the rise of quantum threats.
🕵️♂️ Patch Now: Second SolarWinds Critical Bug in Web Help Desk 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The disclosure of CVE202428987 means that, in two weeks, there have been two critical bugs and corresponding patches for SolarWinds' lessoftendiscussed IT help desk software.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Patch Now: Second SolarWinds Critical Bug in Web Help Desk
The disclosure of CVE-2024-28987 means that, in two weeks, there have been two critical bugs and corresponding patches for SolarWinds' less-often-discussed IT help desk software.
🕵️♂️ Liverpool Fans Take English Premier League Title for Ticket Scams 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Ticket scams are costing football fans close to 200 a season, on average, according to a report.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Liverpool Fans Take English Premier League Title for Ticket Scams
Ticket scams are costing football fans close to £200 a season, on average, according to a report.