Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim’s stolen data by their… Read More »New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
A critical flaw in Canonical’s LXD and MicroCloud let an attacker log in as a trusted client without holding that client’s private key. To do it, the attacker had to… Read More »CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked… Read More »FBI Links North Korea’s TraderTraitor to Record $6.43 Billion Binance Crypto Heist
Cybersecurity researchers have disclosed details of what has been described as a “highly sophisticated infection chain” targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a… Read More »NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
Malicious code on the website of prediction market Polymarket sold some signed-in traders’ positions and moved their funds to the hackers on October 29. The code had replaced a page-speed… Read More »Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach… Read More »Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in… Read More »Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3)… Read More »Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
A malicious ChatGPT share link could run an attacker’s code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm… Read More »A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed… Read More »Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide