US government will let private companies hack criminal gangs
The new program, meant to aggressively disrupt costly cybercrime schemes, carries numerous legal and security risks. Source link
Latest Cybersecurity News — Page 132
View all →
A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
A newly-signed presidential memorandum enlisting private sector companies in federal law enforcement hacking operations against criminal organizations could present a number of legal, practical and…
Attackers target zero-day vulnerability in geospatial data platform GeoServer
If the database runs with administrator permissions on Microsoft SQL Server, the account also has the ability to execute commands on the system, so the…
Private security firms will soon be allowed to hack overseas cybercriminals
The Trump administration is recruiting private security firms to conduct federal government-authorized operations, including cyberattacks, against overseas-based criminal organizations that commit hacks on US persons,…
AWS Certificate Manager will discontinue email validation to prove domain validation for certificates
Today, we’re announcing that AWS Certificate Manager (ACM) will discontinue support for email-validated public certificates by September 30, 2027. If you use email validation for…
Ukraine shuts down 94 fraudulent call centers, seize millions in cash
Authorities in Ukraine shut down 94 fraudulent call centers across the country that lured people into investment scams or tried to obtain access to bank…
Beacon CRM Confirms Full Database Theft After AWS Access Key Breach
Beacon, the customer relationship management (CRM) platform relied on by over a thousand UK charities and non-profit organizations, has confirmed that a threat actor made…
From Detection To Remediation: Automating Cloud Security Fixes In Financial Infrastructure
Modern Cloud Security programs are getting good at finding problems; they can detect exposed storage, vulnerable workloads, excessive permissions, misconfigured networks, risky sign-ins, and policy…
Is AI entering the SOC at the right stage?
By Simon Phillips, CTO, CybaVerse Alert fatigue is an issue that has plagued Security Operations Centres for years. As organisations’ digital estates grow, there is…
Microsoft Exchange Server Vulnerabilities Allow DoS, Privilege Escalation, and RCE
Microsoft has released security updates that address six vulnerabilities in Exchange Server. These vulnerabilities include flaws that could allow remote code execution (RCE), privilege escalation,…
DataGrout helps enterprises control AI usage, governance and LLM costs
SelectHub has announced the launch of DataGrout, its specialized AI research lab introducing an LLM inference optimization platform and AI governance solution for enterprises. DataGrout’s…
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens,…