Bleeping Computer

MARCH 11, 2023

The Brazilian National Telecommunications Agency is seizing incoming Flipper Zero purchases due to its alleged use in criminal activity, with purchasers stating that the government agency has rejected all attempts to certify the equipment. [.

Telecommunications 99

Telecommunications Government 99

Security Boulevard

MARCH 11, 2023

I have been noodling around with ChatGPT recently and have found a nice little use case that I hope someone with more coding skills and. The post A security use case for ChatGPT: Email Scam Robo Judge appeared first on Security Boulevard.

Scams 98

Scams Social Engineering Engineering Hacking 98

Security Affairs

MARCH 11, 2023

A new version of the Prometei botnet has infected more than 10,000 systems worldwide since November 2022, experts warn. Cisco Talos researchers reported that the Prometei botnet has infected more than 10,000 systems worldwide since November 2022. The crypto-mining botnet has a modular structure and employs multiple techniques to infect systems and evade detection.

Firewall 98

Firewall Malware Hacking Accountability 98

The Hacker News

MARCH 11, 2023

The malware downloader known as BATLOADER has been observed abusing Google Ads to deliver secondary payloads like Vidar Stealer and Ursnif. According to cybersecurity company eSentire, malicious ads are used to spoof a wide range of legitimate apps and services such as Adobe, OpenAPI's ChatGPT, Spotify, Tableau, and Zoom.

Malware 98

Malware Cybersecurity 98

Advertisement

How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.

Cybersecurity

Security Affairs

MARCH 11, 2023

US CISA added an actively exploited vulnerability in VMware’s Cloud Foundation to its Known Exploited Vulnerabilities Catalog. U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in VMware’s Cloud Foundation, tracked as CVE-2021-39144 (CVSS score: 9.8), to its Known Exploited Vulnerabilities Catalog.

InfoSec 97

InfoSec Hacking Cybersecurity Risk 97

Bleeping Computer

MARCH 11, 2023

CISA has added an almost three-year-old high-severity remote code execution (RCE) vulnerability in the Plex Media Server to its catalog of security flaws exploited in attacks. [.

Media 94

Media 94

Bleeping Computer

MARCH 11, 2023

The Clop ransomware gang has begun extorting companies whose data was stolen using a zero-day vulnerability in the Fortra GoAnywhere MFT secure file-sharing solution. [.

Ransomware 83

Ransomware 83

WIRED Threat Level

MARCH 11, 2023

Plus: A data breach exposes Washington, Ring camera footage has a new problem, and the George Santos scandal slips into the world of cybercrime.

Data breaches 73

Data breaches Cybercrime Hacking 73

Security Boulevard

MARCH 11, 2023

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Security ’22 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Security ’22 – Shujiang Wu, Jianjia Yu, Min Yang, Yinzhi Cao – ‘Rendering Contention Channel Made Practical In Web Browsers’ appeared first on Security Boulevard.

Education 52

Education InfoSec 52

Security Boulevard

MARCH 11, 2023

As a threat hunter, I have seen the evolution of cyber threats firsthand and the challenges that organizations face when trying to protect themselves. One threat that has been particularly persistent is the malware Emotet. Over the years, I have used both Indicators of Compromise (IOC) and behavioral analysis for hunting Emotet and other malware, […] The post Hunting Emotet: How Behavioural Hunting Trumps IOC Detection Every Time appeared first on Cyborg Security.

Cyber threats 52

Cyber threats Malware 52

Advertiser: Revenera

In a recent study, IDC found that 64% of organizations said they were already using open source in software development with a further 25% planning to in the next year. Most organizations are unaware of just how much open-source code is used and underestimate their dependency on it. As enterprises grow the use of open-source software, they face a new challenge: understanding the scope of open-source software that's being used throughout the organization and the corresponding exposure.

Risk