SecurityTicks

City of Dallas recovers after recent ransomware attack 07/05/2023 at 18:23 By City of Dallas residents are still dealing with some delays and disruptions following a Wednesday ransomware attack which affected some city websites and services. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Add ‘prompt’ to the long list of injection attacks 07/05/2023 at 18:23 By Generative AI tools can be manipulated to accomplish malicious tasks, reveal sensitive information or ignore safety filters with the right prompt. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Five reasons organizations aren’t ready for the next cyberattack 07/05/2023 at 18:23 By Even as security organizations are economizing on everything from desk space to free coffee cyber threats are consistently getting worse. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks 07/05/2023 at 18:22 By Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw. The issue, assigned the identifier CVE-2023-30777, relates to a case of reflected cross-site scripting (XSS) that

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry 07/05/2023 at 18:22 By An advanced persistent threat (APT) actor known as Dragon Breath has been observed adding new layers of complexity to its attacks by adopting a novel DLL side-loading mechanism. “The attack is based on a classic side-loading attack, consisting of a clean application, a malicious

Hackers Targeting Italian Corporate Banking Clients with New Web-Inject Toolkit DrIBAN 07/05/2023 at 18:22 By Italian corporate banking clients are the target of an ongoing financial fraud campaign that has been leveraging a new web-inject toolkit called drIBAN since at least 2019. “The main goal of drIBAN fraud operations is to infect Windows workstations inside corporate environments

New Android Malware ‘FluHorse’ Targeting East Asian Markets with Deceptive Tactics 07/05/2023 at 18:22 By Various sectors in East Asian markets have been subjected to a new email phishing campaign that distributes a previously undocumented strain of Android malware called FluHorse that abuses the Flutter software development framework. “The malware features several malicious Android applications that mimic

N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest Cyberattacks 07/05/2023 at 18:22 By The North Korean state-sponsored threat actor known as Kimsuky has been discovered using a new reconnaissance tool called ReconShark as part of an ongoing global campaign. “[ReconShark] is actively delivered to specifically targeted individuals through spear-phishing emails, OneDrive links leading to document downloads,