ViperSoftX malware covertly runs PowerShell using AutoIT scripting
The latest variants of the ViperSoftX info-stealing malware use the common language runtime (CLR) to load and execute PowerShell commands within AutoIt scripts to evade…
Month: July 2024
Ditch the Checkbox, Use Plain Language, Make It Real: How to Create an Information Security Policy That Works
Information security policies are a table-stakes requirement for any significantly sized organization today but too often they are a mess composed of checkbox lists describing…
CISA urges devs to weed out OS command injection vulnerabilities
CISA and the FBI urged software companies on Wednesday to review their products and eliminate path OS command injection vulnerabilities before shipping. The advisory was…
AI and Ethics: Expert Insights on the Future of Intelligent Technology
The history of artificial intelligence (AI) is a fascinating journey of innovation and discovery that spans decades. From the early days of simple machine learning…
Civil servant was lone voice on Post Office board to query legal plan that blew taxpayers’ cash
The civil servant on the Post Office board during subpostmasters’ High Court litigation battle has said he was alone in having concerns about the organisation’s…
Researchers Trace ‘GuardZoo’ Surveillance To Houthi Militia
Cybersecurity researchers observed an Android surveillance campaign active since October 2019 that has targeted the military personnel of various countries in the Middle East. The…
Monzo launches public bug bounty program to strengthen digital security
Monzo is launching its public bug bounty program, a strategic step to bolster online security. With a keen focus on user safety, this initiative aims…
Windows MSHTML zero-day used in malware attacks for over a year
Microsoft fixed a Windows zero-day vulnerability that has been actively exploited in attacks for eighteen months to launch malicious scripts while bypassing built-in security features.…
The Stark Truth Behind the Resurgence of Russia’s Fin7 – Krebs on Security
The Russia-based cybercrime group dubbed “Fin7,” known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013,…
Pentera updates RansomwareReady to secure Linux environments
Pentera announced a major update to its RansomwareReady product, enabling customers to proactively test the security of their Linux environments. With this addition, Pentera empowers…
Tennis and technology: How Wimbledon gave fans a GenAI experience
For all its history and tradition, and the world-class players on court, watching tennis at Wimbledon is no longer just about watching tennis. Following a…
Microsoft Exits OpenAI Board Amid Regulatory Pressure
In a move likely fueled by intensifying antitrust scrutiny, Microsoft is exiting OpenAI and stepping down from its non-voting observer seat of the AI company’s…