May 2023

How organizations can navigate an evolving fraud landscape

How organizations can navigate an evolving fraud landscape 19/05/2023 at 16:17 By Old fraud tactics continue to be used today in addition to hundreds of other ways that have emerged as new ways to provide business services and products have been adopted. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View […]

React to this headline:

Loading spinner

How organizations can navigate an evolving fraud landscape Read More »

Zerto Cyber Resilience Vault allows users to monitor for encryption-based anomalies

Zerto Cyber Resilience Vault allows users to monitor for encryption-based anomalies 19/05/2023 at 16:03 By Industry News Zerto launched a new real-time encryption detection mechanism and air-gapped recovery vault for enhanced hybrid cloud protection and security against cyber threats. These new features are part of Zerto 10, which includes advanced detection mechanisms that allow users

React to this headline:

Loading spinner

Zerto Cyber Resilience Vault allows users to monitor for encryption-based anomalies Read More »

Jonathan Hale joins Security Validation as Chief Technology Officer

Jonathan Hale joins Security Validation as Chief Technology Officer 19/05/2023 at 15:19 By Security Validation has recently announced the appointment of Jonathan Hale as the new Chief Technology Officer. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

Jonathan Hale joins Security Validation as Chief Technology Officer Read More »

Researchers Identify Second Developer of ‘Golden Chickens’ Malware

Researchers Identify Second Developer of ‘Golden Chickens’ Malware 19/05/2023 at 14:48 By Ionut Arghire Security researchers have identified the second developer of Golden Chickens, a malware suite used by financially-motivated hacking groups Cobalt Group and FIN6. The post Researchers Identify Second Developer of ‘Golden Chickens’ Malware appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Loading spinner

Researchers Identify Second Developer of ‘Golden Chickens’ Malware Read More »

Dr. Active Directory vs. Mr. Exposed Attack Surface: Who’ll Win This Fight?

Dr. Active Directory vs. Mr. Exposed Attack Surface: Who’ll Win This Fight? 19/05/2023 at 14:31 By Active Directory (AD) is among the oldest pieces of software still used in the production environment and can be found in most organizations today. This is despite the fact that its historical security gaps have never been amended. For

React to this headline:

Loading spinner

Dr. Active Directory vs. Mr. Exposed Attack Surface: Who’ll Win This Fight? Read More »

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware 19/05/2023 at 14:31 By Two malicious packages discovered in the npm package repository have been found to conceal an open source information stealer malware called TurkoRat. The packages – named nodejs-encrypt-agent and nodejs-cookie-proxy-agent – were collectively downloaded approximately 1,200 times and were available for more than

React to this headline:

Loading spinner

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware Read More »

Apple fixes WebKit 0-days under attack (CVE-2023-28204, CVE-2023-32373, CVE-2023-32409)

Apple fixes WebKit 0-days under attack (CVE-2023-28204, CVE-2023-32373, CVE-2023-32409) 19/05/2023 at 14:19 By Zeljka Zorz Apple has released security updates for iOS and iPadOS, macOS, tvOS and watchOS, delivering fixes for many vulnerabilities but, most importantly, for CVE-2023-32409, a WebKit 0-day that “may have been actively exploited.” The notes accompanying the updates also revealed that

React to this headline:

Loading spinner

Apple fixes WebKit 0-days under attack (CVE-2023-28204, CVE-2023-32373, CVE-2023-32409) Read More »

DarkBERT could help automate dark web mining for cyber threat intelligence

DarkBERT could help automate dark web mining for cyber threat intelligence 19/05/2023 at 13:05 By Helga Labus Researchers have developed DarkBERT, a language model pretrained on dark web data, to help cybersecurity pros extract cyber threat intelligence (CTI) from the Internet’s virtual underbelly. DarkBERT pretraining process and evaluated use case scenarios (Source: KAIST/S2W) DarkBERT: A

React to this headline:

Loading spinner

DarkBERT could help automate dark web mining for cyber threat intelligence Read More »

Cloudflare Unveils New Secrets Management Solution

Cloudflare Unveils New Secrets Management Solution 19/05/2023 at 13:05 By Ionut Arghire Cloudflare introduces Secrets Store, a new solution to help developers and organizations securely store and manage secrets. The post Cloudflare Unveils New Secrets Management Solution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Loading spinner

Cloudflare Unveils New Secrets Management Solution Read More »

Apple Patches 3 Exploited WebKit Zero-Day Vulnerabilities

Apple Patches 3 Exploited WebKit Zero-Day Vulnerabilities 19/05/2023 at 13:05 By Eduard Kovacs Apple has patched 3 zero-days, two of which are the vulnerabilities patched with the tech giant’s first Rapid Security Response updates. The post Apple Patches 3 Exploited WebKit Zero-Day Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Loading spinner

Apple Patches 3 Exploited WebKit Zero-Day Vulnerabilities Read More »

Rust-Based Info Stealers Abuse GitHub Codespaces

Rust-Based Info Stealers Abuse GitHub Codespaces 19/05/2023 at 12:32 By This is the first part of our security analysis of an information stealer targeting GitHub Codespaces (CS) that discusses how attackers can abuse these cloud services for a variety of malicious activities. This article is an excerpt from Trend Micro Research, News and Perspectives View

React to this headline:

Loading spinner

Rust-Based Info Stealers Abuse GitHub Codespaces Read More »

Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware

Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware 19/05/2023 at 10:55 By Malicious Google Search ads for generative AI services like OpenAI ChatGPT and Midjourney are being used to direct users to sketchy websites as part of a BATLOADER campaign designed to deliver RedLine Stealer malware. “Both AI services are extremely popular but

React to this headline:

Loading spinner

Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware Read More »

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities 19/05/2023 at 07:50 By Apple on Thursday rolled out security updates to iOS, iPadOS, macOS, tvOS, watchOS, and the Safari web browser to address three new zero-day flaws that it said are being actively exploited in the wild. The three security shortcomings are listed below

React to this headline:

Loading spinner

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities Read More »

New infosec products of the week: May 19, 2023

New infosec products of the week: May 19, 2023 19/05/2023 at 07:30 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Bitwarden, Cloudflare, ComplyAdvantage, Enzoic, Neurotechnology, Nozomi Networks, and Satori. ComplyAdvantage Fraud Detection identifies and prevents transaction fraud Fraud Detection uses AI and machine learning

React to this headline:

Loading spinner

New infosec products of the week: May 19, 2023 Read More »

Exploring the tactics of phishing and scam websites in 2023

Exploring the tactics of phishing and scam websites in 2023 19/05/2023 at 07:02 By Help Net Security Phishing scams pose an escalating danger as cybercriminals employ increasingly sophisticated techniques, rendering their detection and prevention more challenging. In this Help Net Security video, Abhilash Garimella, Head of Research at Bolster, talks about the evolution of phishing

React to this headline:

Loading spinner

Exploring the tactics of phishing and scam websites in 2023 Read More »

Inadequate tools leave AppSec fighting an uphill battle for cloud security

Inadequate tools leave AppSec fighting an uphill battle for cloud security 19/05/2023 at 06:32 By Help Net Security AppSec teams are stuck in a catch-up cycle, unable to keep up with the increasingly rapid, agile dev pace, and playing security defense via an endless and unproductive vulnerability chase, according to Backslash Security. Costly ‘defensive tax’

React to this headline:

Loading spinner

Inadequate tools leave AppSec fighting an uphill battle for cloud security Read More »

Europe: The DDoS battlefield

Europe: The DDoS battlefield 19/05/2023 at 06:07 By Help Net Security DDoS attacks appear to reflect major geo-political challenges and social tensions and have become an increasingly significant part in the hybrid warfare arsenal, according to Arelion. As the Ukrainian authorities sought a safe harbour for digital state registries and databases, Arelion saw the distribution

React to this headline:

Loading spinner

Europe: The DDoS battlefield Read More »

12 new vulnerabilities have become associated with ransomware

12 new vulnerabilities have become associated with ransomware 19/05/2023 at 00:04 By New research identified 12 vulnerabilities newly associated with ransomware in Q1 2023, indicating increasingly complicated ransomware attacks. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

12 new vulnerabilities have become associated with ransomware Read More »

European Data Protection Board changes facial recognition guidelines

European Data Protection Board changes facial recognition guidelines 18/05/2023 at 22:05 By The European Data Protection Board (EDPB) has updated its facial recognition guidelines for law enforcement to ensure compliance with privacy laws.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

European Data Protection Board changes facial recognition guidelines Read More »

Investors Make $6M Bet on Manifest for SBOM Management Technology

Investors Make $6M Bet on Manifest for SBOM Management Technology 18/05/2023 at 22:05 By Ryan Naraine Manifest raises $6 million in seed funding to help businesses generate, collect, and manage software bill of materials (SBOMs). The post Investors Make $6M Bet on Manifest for SBOM Management Technology appeared first on SecurityWeek. This article is an

React to this headline:

Loading spinner

Investors Make $6M Bet on Manifest for SBOM Management Technology Read More »

Scroll to Top