2024

Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks

Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks 2024-07-17 at 10:01 By The infamous cybercrime group known as Scattered Spider has incorporated ransomware strains such as RansomHub and Qilin into its arsenal, Microsoft has revealed. Scattered Spider is the designation given to a threat actor that’s known for its sophisticated social engineering schemes […]

Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks Read More »

ESA starts work on planetary defence mission, because Bruce Willis is retired

ESA starts work on planetary defence mission, because Bruce Willis is retired 2024-07-17 at 09:46 By Laura Dobberstein Asteroid Apophis will come within 32,000km of Earth in 2029, which makes it very much worth a visit The European Space Agency has begun work on a planetary defence mission that will intercept an asteroid predicted to

ESA starts work on planetary defence mission, because Bruce Willis is retired Read More »

Critical Apache HugeGraph Vulnerability Under Attack – Patch ASAP

Critical Apache HugeGraph Vulnerability Under Attack – Patch ASAP 2024-07-17 at 08:46 By Threat actors are actively exploiting a recently disclosed critical security flaw impacting Apache HugeGraph-Server that could lead to remote code execution attacks. Tracked as CVE-2024-27348 (CVSS score: 9.8), the vulnerability impacts all versions of the software before 1.3.0. It has been described

Critical Apache HugeGraph Vulnerability Under Attack – Patch ASAP Read More »

Fujitsu picks model-maker Cohere as its partner for the rapid LLM-development dance

Fujitsu picks model-maker Cohere as its partner for the rapid LLM-development dance 2024-07-17 at 08:22 By Simon Sharwood Will become exclusive route to market for joint projects Fujitsu has made a “significant investment” in Toronto-based Cohere Inc., a developer of large language models and associated tech, and will bring the five-year-old startup’s wares to the

Fujitsu picks model-maker Cohere as its partner for the rapid LLM-development dance Read More »

Overlooked essentials: API security best practices

Overlooked essentials: API security best practices 2024-07-17 at 07:31 By Mirko Zorz In this Help Net Security, Ankita Gupta, CEO at Akto, discusses API security best practices, advocating for authentication protocols like OAuth 2.0 and OpenID Connect, strict HTTPS encryption, and the use of JWTs for stateless authentication. Gupta recommends role-based access control (RBAC) and

Overlooked essentials: API security best practices Read More »

SubSnipe: Open-source tool for finding subdomains vulnerable to takeover

SubSnipe: Open-source tool for finding subdomains vulnerable to takeover 2024-07-17 at 07:01 By Mirko Zorz SubSnipe is an open-source, multi-threaded tool to help find subdomains vulnerable to takeover. It’s simpler, produces better output, and has more fingerprints than other subdomain takeover tools. “SubSnipe does some additional verification after the fingerprinting to find candidates more likely

SubSnipe: Open-source tool for finding subdomains vulnerable to takeover Read More »

TikTok’s Asian e-commerce haul quadrupled in a single year

TikTok’s Asian e-commerce haul quadrupled in a single year 2024-07-17 at 06:31 By Laura Dobberstein Rescued its partner in Indonesia as it dodged regulations Chinese short video platform TikTok is fast becoming an Asian e-commerce giant, according to analysis released by Singapore-based consultancy Momentum Works on Tuesday.… This article is an excerpt from The Register

TikTok’s Asian e-commerce haul quadrupled in a single year Read More »

Cybersecurity jobs available right now: July 17, 2024

Cybersecurity jobs available right now: July 17, 2024 2024-07-17 at 06:31 By Anamarija Pogorelec Adversary Emulation Team Member Australian Federal Police | Australia | On-site – View job details As an Adversary Emulation Team Member you will participate in testing and assessment activities in both domestic and international settings. You will gain exposure to a

Cybersecurity jobs available right now: July 17, 2024 Read More »

Most GitHub Actions workflows are insecure in some way

Most GitHub Actions workflows are insecure in some way 2024-07-17 at 06:01 By Help Net Security Most GitHub Actions are susceptible to exploitation; they are overly privileged or have risky dependencies, according to Legit Security. GitHub Actions security flaws pose major risks The report found the GitHub Actions marketplace’s security posture to be especially concerning,

Most GitHub Actions workflows are insecure in some way Read More »

If you think AI labs wouldn’t stoop to using scraped YouTube subtitles for training, think again

If you think AI labs wouldn’t stoop to using scraped YouTube subtitles for training, think again 2024-07-17 at 04:46 By Matthew Connatser What next, nutrition labels on cartons? Probably Comment  FYI: It’s not just Reddit posts, books, articles, webpages, code, music, images, and so forth being used by multi-billion-dollar businesses for training neural networks. AI

If you think AI labs wouldn’t stoop to using scraped YouTube subtitles for training, think again Read More »

UnitedHealth Sticks to 2024 Outlook Despite Strong Quarter With Costs From Massive Cyberattack High

UnitedHealth Sticks to 2024 Outlook Despite Strong Quarter With Costs From Massive Cyberattack High 2024-07-17 at 04:46 By Associated Press UnitedHealth booked $1.1 billion in total costs from the cyberattack in the second quarter. The post UnitedHealth Sticks to 2024 Outlook Despite Strong Quarter With Costs From Massive Cyberattack High appeared first on SecurityWeek. This

UnitedHealth Sticks to 2024 Outlook Despite Strong Quarter With Costs From Massive Cyberattack High Read More »

Iran’s MuddyWater phishes Israeli orgs with custom BugSleep backdoor

Iran’s MuddyWater phishes Israeli orgs with custom BugSleep backdoor 2024-07-17 at 03:16 By Jessica Lyons India, Turkey, also being targeted by campaign that relies on corporate email compromise MuddyWater, an Iranian government-backed cyber espionage crew, has upgraded its malware with a custom backdoor, which it’s used to target Israeli organizations.… This article is an excerpt

Iran’s MuddyWater phishes Israeli orgs with custom BugSleep backdoor Read More »

On one Prime Day, Amazon warehouse workers endured ‘45% injury rate’

On one Prime Day, Amazon warehouse workers endured ‘45% injury rate’ 2024-07-17 at 00:46 By Matthew Connatser Bernie Sanders puts e-souk titan on blast for workplace harm Risk of workplace injury is extremely high for Amazon warehouse workers during Prime Day and the holiday season, according to a US Senate committee report.… This article is

On one Prime Day, Amazon warehouse workers endured ‘45% injury rate’ Read More »

2.3 Million Users Affected by Advance Auto Parts Breach

2.3 Million Users Affected by Advance Auto Parts Breach 2024-07-17 at 00:01 Advance Auto Parts has confirmed that a data breach has affected over 2.3 million individuals, exposing sensitive personal information such as names, Social Security numbers, driver’s licenses, and government-issued identification numbers. This breach, which occurred between April 14, 2024, and May 24, 2024,

2.3 Million Users Affected by Advance Auto Parts Breach Read More »

Antitrust: GoDaddy under fire for banning DNS automation tool in favor of its own

Antitrust: GoDaddy under fire for banning DNS automation tool in favor of its own 2024-07-17 at 00:01 By Brandon Vigliarolo Domain name giant yanked into court after Entri Connect disconnect GoDaddy is facing an antitrust lawsuit over claims it unfairly and underhandedly blackballed a smaller outfit’s DNS automation tool in favor of its own apparently

Antitrust: GoDaddy under fire for banning DNS automation tool in favor of its own Read More »

You know what spreadsheets need? LLMs, says Microsoft

You know what spreadsheets need? LLMs, says Microsoft 2024-07-16 at 22:37 By Dan Robinson Excel-lent, Smithers, have we fired accounting yet? Researchers at Microsoft have developed a framework designed to make it easier for large language models (LLMs) to analyze the content of spreadsheets and perform data management and analysis tasks, because why not?… This

You know what spreadsheets need? LLMs, says Microsoft Read More »

Scroll to Top