2023

Stealthy VBA Macro Embedded in PDF-like Header Helps Evade Detection 20/09/2023 at 16:17 By Rodel Mendrez In the ever-evolving landscape of malware threats, threat actors are continually creating new techniques to bypass detection. A recent discovery by JPCERT/CC sheds light on a new technique that involves embedding a malicious Word document within a seemingly benign […]

ChatGPT Update: How Security Teams and Threat Actors are Using Artificial Intelligence 20/09/2023 at 16:02 By ChatGPT and other Large Learning Modules have been in use for less than a year, yet these applications are transforming at an almost exponential rate.  This article is an excerpt from Trustwave Blog View Original Source

Critical Security Flaws Exposed in Nagios XI Network Monitoring Software 20/09/2023 at 16:01 By Multiple security flaws have been disclosed in the Nagios XI network monitoring software that could result in privilege escalation and information disclosure. The four security vulnerabilities, tracked from CVE-2023-40931 through CVE-2023-40934, impact Nagios XI versions 5.11.1 and lower. Following responsible disclosure

Be the threat: Case for hands-on threat simulations in cybersecurity 20/09/2023 at 15:47 By The cyber threat landscape demands that organizations equip cybersecurity teams with the necessary skills to detect, respond and defend against malicious attacks. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Sysadmin and spouse admit to part in ‘massive’ pirated Avaya licenses scam 20/09/2023 at 15:23 By Jude Karabus Will spend 20 years in prison after selling $88M in ADI software keys A sysadmin and his partner pleaded guilty this week to being part of a “massive” international ring that sold software licenses worth $88 million

Do You Really Trust Your Web Application Supply Chain? 20/09/2023 at 14:01 By Well, you shouldn’t. It may already be hiding vulnerabilities. It’s the modular nature of modern web applications that has made them so effective. They can call on dozens of third-party web components, JS frameworks, and open-source tools to deliver all the different

Fresh Wave of Malicious npm Packages Threaten Kubernetes Configs and SSH Keys 20/09/2023 at 14:01 By Cybersecurity researchers have discovered a fresh batch of malicious packages in the npm package registry that are designed to exfiltrate Kubernetes configurations and SSH keys from compromised machines to a remote server. Sonatype said it has discovered 14 different