In a significant cybersecurity revelation, critical vulnerabilities were discovered in the GovQA platform, a tool extensively used by state and local governments across the U.S. to manage public records requests. Independent researcher Jason Parker uncovered flaws that, if exploited, could have…
In a world of ever-expanding jargon, adding another FLA (Four-Letter Acronym) to your glossary might seem like the last thing you’d want to do. But if you are looking for ways to continuously reduce risk across your environment while making significant and consistent improvements to security posture, in our opinion, you…
Vulnerabilities affecting a Nice Linear physical access product, including an exploited flaw, patched five years after their disclosure.
The post Exploited Building Access System Vulnerability Patched 5 Years After Disclosure appeared first on SecurityWeek….
Overview The SonicWall Capture Labs threat research team recently observed an interesting variant of StopCrypt ransomware. The ransomware executes its malicious activities by utilizing multi-stage shellcodes before launching a final payload that contains the file […]
Like ChatGPT and other GenAI tools, Gemini is susceptible to attacks that can cause it to divulge system prompts, reveal sensitive information, and execute potentially malicious actions….
Justice Department Beefs up Focus on Artificial Intelligence Enforcement, Warns of Harsher Sentences
Officials are set to warn that companies and people who deliberately misuse AI technology to advance a white-collar crime like price fixing and market manipulation will be at risk for a harsher sentence
The post Justice Department Beefs up Focus on Artificial Intelligence Enforcement, Warns of Harsher Sentences appeared first on SecurityWeek….
A new malware campaign is leveraging a high-severity security flaw in the Popup Builder plugin for WordPress to inject malicious JavaScript code.
According to Sucuri, the campaign has infected more than 3,900 sites over the past three weeks.
“These attacks are orchestrated from domains less than a month old, with registrations dating back to February…
The COM Hijacking technique is often utilized by threat actors and various malware families to achieve both persistence and privilege escalation in target systems. It relies on manipulating Component Object Model (COM), exploiting the core architecture of Windows that enables com…
AhnLab ASEC reports renewed distribution of CryptoWire ransomware, which is written in AutoIt and primarily spread via phishing emails; it persists by copying itself to C:Program FilesCommon Files and registering a scheduled task. The malware performs local ne…
ThreatLabz uncovered a campaign distributing Tweaks (Tweaker), an infostealer targeting Roblox users via YouTube and Discord. The malware masquerades as FPS optimization tools, exfiltrates data through Discord webhooks, and even offers paid variants. #Tweaks #…
DoNex is a new Windows-based ransomware family that performs local and network file discovery, stops interfering services/processes, encrypts data with salsa20/chacha20, clears event logs, and forces a reboot. Analysis and a YARA rule for the sample (SHA256 0a…
ReversingLabs uncovered the BIPClip campaign: a set of malicious PyPI packages that used name-squatting and a malicious dependency to capture and exfiltrate BIP39 mnemonic passphrases. The operation staged data exfiltration via Base64-obfuscated URLs and HTTP …
AhnLab SEcurity intelligence Center (ASEC) recently discovered the distribution of an infostealer disguised as the Adobe Reader installer. The threat actor is distributing the file as PDF, prompting users to download and run the file. As shown in the Figure 1, the fake PDF file is written in Portuguese, and the…
The New Technology File System (NTFS) is a file system developed and introduced by Microsoft in 1995, It was produced to overcome some limitations and offer new features. Hard-links Improved performance, reliability, and disk space utilization Security access control lists File system journaling Her…
Exploitation of known vulnerabilities in public-facing apps is now the main entry vector for ransomware, with CVEs in Zoho ManageEngine, Microsoft Exchange Server, Citrix and Cisco VPN highlighted. Attackers are expanding toolsets (including BYOVD) and adaptin…