Cybersecurity researchers are warning about a spike in email phishing campaigns that are weaponizing the Google Cloud Run service to deliver various banking trojans such as Astaroth (aka Guildma), Mekotio, and Ousaban (aka Javali) to… Read More »Banking Trojans Target Latin America and Europe Through Google Cloud Run
Last year, the Open Worldwide Application Security Project (OWASP) published multiple versions of the “OWASP Top 10 For Large Language Models,” reaching a 1.0 document in August and a 1.1… Read More »Three Tips to Protect Your Secrets from AI Accidents
A set of fake npm packages discovered on the Node.js repository has been found to share ties with North Korean state-sponsored actors, new findings from Phylum show. The packages are… Read More »North Korean Hackers Targeting Developers with Malicious npm Packages
The threat actors behind the LockBit ransomware operation have resurfaced on the dark web using new infrastructure, days after an international law enforcement exercise seized control of its servers. To that end,… Read More »LockBit Ransomware Group Resurfaces After Law Enforcement Takedown
In the past 2 years, we have observed a significant surge in hacktivism activity due to ongoing wars and geopolitical conflicts in various regions. Since the war against Ukraine began,… Read More »A New Age of Hacktivism
A recently open-sourced network mapping tool called SSH-Snake has been repurposed by threat actors to conduct malicious activities. “SSH-Snake is a self-modifying worm that leverages SSH credentials discovered on a compromised system… Read More »Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks
Apple has announced a new post-quantum cryptographic protocol called PQ3 that it said will be integrated into iMessage to secure the messaging platform against future attacks arising from the threat of a… Read More »Apple Unveils PQ3 Protocol – Post-Quantum Encryption for iMessage
The U.S. Federal Trade Commission (FTC) has hit antivirus vendor Avast with a $16.5 million fine over charges that the firm sold users’ browsing data to advertisers after claiming its… Read More »FTC Slams Avast with $16.5 Million Fine for Selling Users’ Browsing Data
Details have emerged about a now-patched high-severity security flaw in Apple’s Shortcuts app that could permit a shortcut to access sensitive information on the device without users’ consent. The vulnerability,… Read More »Researchers Detail Apple’s Recent Zero-Click Shortcuts Vulnerability
Created by John Tuckner and the team at workflow and automation platform Tines, the SOC Automation Capability Matrix (SOC ACM) is a set of techniques designed to help security operations teams understand their… Read More »How to Use Tines’s SOC Automation Capability Matrix