A group of researchers has discovered a new data leakage attack impacting modern CPU architectures supporting speculative execution. Dubbed GhostRace (CVE-2024-2193), it is a variation of the transient execution CPU vulnerability known… Read More »GhostRace – New Data Leak Vulnerability Affects Modern CPUs
Cybersecurity researchers have found that third-party plugins available for OpenAI ChatGPT could act as a new attack surface for threat actors looking to gain unauthorized access to sensitive data. According… Read More »Third-Party ChatGPT Plugins Could Lead to Account Takeovers
Google on Thursday announced an enhanced version of Safe Browsing to provide real-time, privacy-preserving URL protection and safeguard users from visiting potentially malicious sites. “The Standard protection mode for Chrome on desktop… Read More »Google Introduces Enhanced Real-Time URL Protection for Chrome Users
Chinese users looking for legitimate software such as Notepad++ and VNote on search engines like Baidu are being targeted with malicious ads and bogus links to distribute trojanized versions of… Read More »Malicious Ads Targeting Chinese Users with Fake Notepad++ and VNote Installers
Details have been made public about a now-patched high-severity flaw in Kubernetes that could allow a malicious attacker to achieve remote code execution with elevated privileges under specific circumstances. “The… Read More »Researchers Detail Kubernetes Vulnerability That Enables Windows Node Takeover
A 34-year-old Russian-Canadian national has been sentenced to nearly four years in jail in Canada for his participation in the LockBit global ransomware operation. Mikhail Vasiliev, an Ontario resident, was originally… Read More »LockBit Ransomware Hacker Ordered to Pay $860,000 After Guilty Plea in Canada
The Russian-speaking cybercrime group called RedCurl is leveraging a legitimate Microsoft Windows component called the Program Compatibility Assistant (PCA) to execute malicious commands. “The Program Compatibility Assistant Service (pcalua.exe) is a Windows… Read More »RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage
Being a CISO is a balancing act: ensuring organizations are secure without compromising users’ productivity. This requires taking multiple elements into consideration, like cost, complexity, performance and user experience. CISOs… Read More »3 Things CISOs Achieve with Cato
The threat actor known as Blind Eagle has been observed using a loader malware called Ande Loader to deliver remote access trojans (RATs) like Remcos RAT and NjRAT. The attacks,… Read More »Ande Loader Malware Targets Manufacturing Sector in North America
Fortinet has warned of a critical security flaw impacting its FortiClientEMS software that could allow attackers to achieve code execution on affected systems. “An improper neutralization of special elements used… Read More »Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS Software