AWS Using MadPot Decoy System to Disrupt APTs, Botnets
Cloud computing giant AWS says an internal threat intel decoy system called MadPot has been used successfully to trap malicious activity, including nation state-backed APTs…
Category: SecurityWeek
In Other News: RSA Encryption Attack, Meta AI Privacy, ShinyHunters Hacker Guilty Plea
SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a…
Generative AI Startup Nexusflow Raises $10.6 Million
California startup Nexusflow on Thursday announced that it has raised $10.6 million in seed funding to work on technology to help organizations improve security through…
Researchers Extract Sounds From Still Images on Smartphone Cameras
A group of academic researchers has devised a technique to extract sounds from still images captured using smartphone cameras with rolling shutter and movable lens…
National Security Agency is Starting an Artificial Intelligence Security Center
The National Security Agency is starting an artificial intelligence security center — a crucial mission as AI capabilities are increasingly acquired, developed and integrated into…
CISA Warns of Old JBoss RichFaces Vulnerability Being Exploited in Attacks
US cybersecurity agency CISA is warning organizations that an old vulnerability affecting JBoss RichFaces has been exploited in attacks. The flaw, tracked as CVE-2018-14667, was…
Hackers Set Sights on Apache NiFi Flaw That Exposes Many Organizations to Attacks
A high-severity remote code execution (RCE) vulnerability in Apache NiFi, for which an exploitation tool already exists, can lead to unauthorized access and data breaches,…
A Key US Government Surveillance Tool Should Face New Limits, a Divided Privacy Oversight Board Says
Federal spy agencies should be required to get court approval before reviewing the communications of U.S. citizens collected through a secretive foreign surveillance program, a…
Cloudflare Users Exposed to Attacks Launched From Within Cloudflare: Researchers
Gaps in Cloudflare’s security controls allow users to bypass customer-configured protection mechanisms and target other users from the platform itself, technology consulting firm Certitude warns.…
FBI Warns Organizations of Dual Ransomware, Wiper Attacks
The FBI is warning organizations of new trends in ransomware attacks, where victims are targeted by multiple file-encrypting malware families or with wipers. As part…
US State Department Says 60,000 Emails Taken in Alleged Chinese Hack
The US State Department said Thursday that hackers took around 60,000 emails, although none of them classified, in an attack which Microsoft has blamed on…
Progress Software Patches Critical Pre-Auth Flaws in WS_FTP Server Product
Enterprise technology vendor Progress Software on Thursday shipped patches for critical-level security flaws in its WS_FTP file transfer software, warning that a pre-authenticated attacker could…