Security Think Tank: Three ways to identify the best encryption use cases
“We need encryption! Make it end-to-end! Implement it everywhere!” Sound familiar? These are the mandates that many CISOs are receiving right now. They’re coming from…
Month: September 2023
DOM Invader and the case of direct eval vs indirect eval | Blog
Gareth Heyes | 25 September 2023 at 14:00 UTC What is DOM Invader? DOM Invader is a browser extension that makes it easy to find…
Stealthy APT Gelsemium Seen Targeting Southeast Asian Government
A stealthy advanced persistent threat (APT) actor known as Gelsemium has been observed targeting a government entity in Southeast Asia to establish persistence and collect…
Fake celebrity photo leak videos flood TikTok with Temu referral codes
TikTok is flooded with videos promoting fake nude celebrity photo leaks used to push referral rewards for the Temu online megastore. Temu is an online…
Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals
Sep 25, 2023THNCyber Attack / Phishing Ukrainian military entities are the target of a phishing campaign that leverages drone manuals as lures to deliver a…
Amazon takes $4m minority stake in AI safety research startup Anthropic
Amazon Web Services (AWS) is taking a minority stake worth $4m in artificial intelligence (AI) safety and research startup Anthropic, and is set to become the…
Nigerian Pleads Guilty in US to Million-Dollar BEC Scheme Role
A Nigerian national residing in South Africa last week pleaded guilty in court in the United States to his role in a million-dollar business email…
Mixin Network suspends operations following $200 million hack
Mixin Network, an open-source, peer-to-peer transactional network for digital assets, has announced today on Twitter that deposits and withdrawals are suspended effective immediately due to…
Are You Willing to Pay the High Cost of Compromised Credentials?
Sep 25, 2023The Hacker NewsPassword Security / Cybersecurity Weak password policies leave organizations vulnerable to attacks. But are the standard password complexity requirements enough to…
Apple fixes three vulnerabilities found by spyware researchers
Apple has once again moved to lock down zero-day vulnerabilities uncovered by researchers specialising in commercial spyware and government surveillance, issuing a new patch for…
ALPHV Ransomware Group’s 3 New Victims: Clarion, Phil Data, MNGI
The infamous ALPHV ransomware group, also recognized as Black Cat hacker collective, has revealed the list of its latest victims. With a growing list of…
Harnessing AI Defenses Against AI-Powered Risks
Sep 25, 2023The Hacker NewsArtificial Intelligence / Cybersecurity Generative AI is a double-edged sword, if there ever was one. There is broad agreement that tools…