Secure enterprise microservices development firm Codezero raises $3.5 million in seed funding.
The post Codezero Raises $3.5 Million for DevOps Security Solution appeared first on SecurityWeek….
Recent research has surfaced serious security vulnerabilities within ChatGPT plugins, raising concerns about potential data breaches and account takeovers. These flaws could allow attackers to gain control of organisational accounts on third-party platforms and access sensitive user data, incl…
In today’s digital landscape, small and medium-sized businesses (SMBs) are increasingly becoming prime targets for cybercriminals looking to exploit vulnerabilities for financial gain. A recent report from cybersecurity firm Sophos sheds light on the top cyber threats facing SMBs, highlighting infor…
R00TK1T, a hacking group, has released a statement challenging the Malaysian government’s assertion that the PADU system remains uncompromised. The group has substantiated its claim with a series of screenshots and access credentials obtained from the system’s users. In a bold move to underscore the…
All companies — not just federal agencies — should aim to adopt the "network and environment" pillar of the National Security Agency’s zero-trust guidelines….
Thousands of WordPress sites are at risk of takeover due to a critical privilege escalation vulnerability in two closed MiniOrange plugins.
The post Discontinued Security Plugins Expose Many WordPress Sites to Takeover appeared first on SecurityWeek….
Cybersecurity researchers have found that third-party plugins available for OpenAI ChatGPT could act as a new attack surface for threat actors looking to gain unauthorized access to sensitive data.
According to new research published by Salt Labs, security flaws found directly in ChatGPT and within the ecosystem could allow attackers to install malicious plugins…
Restoro and Reimage agree to a $26 million settlement after selling fake antivirus and tech services to undercover FTC agents.
The post Tech Support Firms Agree to $26M FTC Settlement Over Fake Services appeared first on SecurityWeek….
Recent data breach at unemployment agency France Travail (Pôle Emploi) could impact 43 million people.
The post 43 Million Possibly Impacted by French Government Agency Data Breach appeared first on SecurityWeek….
Red Canary’s 2024 Threat Detection Report is based on analysis of almost 60,000 threats across 216 petabytes of telemetry from over 1,000 customers’ endpoints.
The post Threat Detection Report: Cloud Attacks Soar, Mac Threats and Malvertising Escalate appeared first on SecurityWeek….
We analyze recent samples of BunnyLoader 3.0 to illuminate this malware’s evolved and upscaled capabilities, including its new downloadable module system.
The post Inside the Rabbit Hole: BunnyLoader 3.0 Unveiled appeared first on Unit 42….
A threat actor has purportedly put up for sale access to the backoffice/admin panel of a leading Spanish cryptocurrency exchange. According to the actor, this access grants entry to the largest crypto exchange platform in Spain. Allegedly, this access enables users to look up sensitive information s…
Google on Thursday announced an enhanced version of Safe Browsing to provide real-time, privacy-preserving URL protection and safeguard users from visiting potentially malicious sites.
“The Standard protection mode for Chrome on desktop and iOS will check sites against Google’s server-side list of known bad sites in real-time,” Google’s Jonathan Li and Jasika Bawa said.
“If we…
Chinese users looking for legitimate software such as Notepad++ and VNote on search engines like Baidu are being targeted with malicious ads and bogus links to distribute trojanized versions of the software and ultimately deploy Geacon, a Golang-based implementation of Cobalt Strike.
“The malicious site found in the notepad++ search is distributed through…
CGSI Probes: ShadowSyndicate Group’s Possible Exploitation of Aiohttp Vulnerability (CVE-2024-23334)
A directory traversal flaw in aiohttp (CVE-2024-23334) allows unauthenticated remote attackers to read arbitrary files on servers running vulnerable versions prior to 3.9.2, and a public PoC triggered widespread scanning soon after publication. Observed scanni…