Infosec News

Operation Overload, also referred to as Matryoshka and Storm-1679, has aimed "significant resources" at the U.S. presidential election and particularly Democrat Kamala Harris’ campaign, according to new research.

Critical Bitdefender vulnerabilities in Total Security and SafePay. Update now to protect against online threats.

Discover how organizational culture impacts SaaS security and why proactive measures are essential for protection.

How does Prometei insidiously operate in a compromised system? This Managed Extended Detection and Response investigation conducted with the help of Trend Vision One provides a comprehensive analysis of the inner workings of this botnet so users can stop the threat in its tracks before it inflicts d...

We examine an LLM jailbreaking technique called "Deceptive Delight," a technique that mixes harmful topics with benign ones to trick AIs, with a high success rate. We examine an LLM jailbreaking technique called "Deceptive Delight," a technique that mixes harmful topics with benign ones to trick AIs...

Kaspersky GReAT experts break down the new campaign of Lazarus APT which uses social engineering and exploits a zero-day vulnerability in Google Chrome for financial gain.

Cyble's vulnerability intelligence report reveals over 30 active cyberattack campaigns, highlighting severe threats to Spring Java framework and IoT devices.

Discover the new "Deceptive Delight" technique for jailbreaking AI models, posing significant cybersecurity risks.

Using the Trend Micro Vision One platform, our MDR team was able to quickly identify and contain a Play ransomware intrusion attempt.

As the competition continues to grow, Horse Plinko is proving to be more than just a fun event.

Linux Kernel N-day Exploit/Analysis. Contribute to MaherAzzouzi/LinuxKernel-nday development by creating an account on GitHub.

CISA flags critical SolarWinds Web Help Desk flaw, urging U.S. agencies to patch by Nov 5, 2024.

Use generative AI-influenced cybersecurity by harnessing the power of secure AI on the go.

One of the most significant vulnerabilities highlighted in the advisory involves the product suites from ICONICS and Mitsubishi Electric.

Update GitHub Enterprise Server to patch critical SSO bypass vulnerability (CVE-2024-9487). Protect against unauthorized access.

Enterprises have gone all-in on GenAI, but the more they depend on AI models, the more security risks they face - here's how to have secure GenAI.

Democratic lawmakers are asking the Department of Justice to prosecute major tax preparation firms for sharing customers’ sensitive personal and financial data with Google and Meta, the latter of whom they say used the information for advertising and to train its artificial intelligence algorithm.

A spear-phishing campaign in Brazil uses fake tax files to deliver Astaroth malware, impacting key industries.

VP of of Threat Intelligence Jon Clay reviews 7 key initial cyber attack vendors and provides proactive security tips to help you reduce cyber risk across the attack surface.

The Securities and Exchange Commission (SEC) said Check Point, Avaya, Unisys and Mimecast would each pay fines related to how they disclosed information related to the impact of the breach of SolarWinds software in 2020.

Cybersecurity tools are inconsistent and incomplete in their coverage of the MITRE ATT&CK framework, according to research presented at MITRE ATT&CKcon.

New npm packages discovered stealing Ethereum keys and enabling SSH access. Developers urged to review usage.

We provide a technical analysis on how CVE-2023-22527 can be exploited by malicious actors for cryptojacking attacks that can spread across the victim’s system.

Officials from U.S. intelligence agencies are warning that foreign adversaries — especially Russia — will intensify their influence efforts in the final two weeks before the U.S. election and will seek to undermine the legitimacy of the election process afterward.

CISA's addition of CVE-2024-9537 to the KEV Catalog is a reminder of the evolving nature of cyber threats.

Docker API servers are under attack as hackers deploy SRBMiner to mine XRP illicitly. Learn more about this threat.

Threat actors are targeting users in the Middle East by distributing sophisticated malware disguised as the Palo Alto GlobalProtect tool.

Join us in November 2024 for Microsoft Ignite to connect with industry leaders and learn about our newest solutions and innovations.