Cybersecurity researchers have shed light on a new adversarial technique that could be used to jailbreak large language models (LLMs) during the course of an interactive conversation by sneaking in… Read More »Researchers Reveal ‘Deceptive Delight’ Method to Jailbreak AI Models
Russian-speaking users have become the target of a new phishing campaign that leverages an open-source phishing toolkit called Gophish to deliver DarkCrystal RAT (aka DCRat) and a previously undocumented remote… Read More »Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans
Bad actors have been observed targeting Docker remote API servers to deploy the SRBMiner crypto miner on compromised instances, according to new findings from Trend Micro. “In this attack, the… Read More »Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks
Details have emerged about a now-patched security flaw in Styra’s Open Policy Agent (OPA) that, if successfully exploited, could have led to leakage of New Technology LAN Manager (NTLM) hashes.… Read More »Security Flaw in Styra’s OPA Exposes NTLM Hashes to Remote Attackers
Service accounts are vital in any enterprise, running automated processes like managing applications or scripts. However, without proper monitoring, they can pose a significant security risk due to their elevated… Read More »A Comprehensive Guide to Finding Service Accounts in Active Directory
Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private keys and gain remote access to the machine via… Read More »Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor
Two malware families that suffered setbacks in the aftermath of a coordinated law enforcement operation called Endgame have resurfaced as part of new phishing campaigns. Bumblebee and Latrodectus, which are… Read More »Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies
VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 (CVSS… Read More »VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation… Read More »CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack
The prolific Chinese nation-state actor known as APT41 (aka Brass Typhoon, Earth Baku, Wicked Panda, or Winnti) has been attributed to a sophisticated cyber attack targeting the gambling and gaming… Read More »Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain