Sharp Dragon Hackers Attacking Gov Entities Using Cobalt Strike
The activities of the Chinese threat actor group known as Sharp Dragon (formerly Sharp Panda) have been meticulously documented. Since 2021, this group has been…
Latest Cybersecurity News — Page 4770
View all →
Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack
May 24, 2024NewsroomSupply Chain Attack / Malware Malicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS)…
HMRC boosts data scientist numbers
HM Revenue and Customs (HMRC) has significantly increased its spending on data science expertise, according to figures revealed by a Freedom of Information (FoI) request. The…
GenAI Bots Can Be Tricked by Anyone To Leak Company Secrets
The introduction and widespread use of generative AI technologies such as ChatGPT has shown a new era for the world but comes with some unexplored…
Association Of California School Administrators Confirms Attack
An unknown ransomware actor has compromised the personally identifiable data of more than 50,000 Californian school administrators, their association told Maine’s Attorney General in a…
Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors
Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors Pierluigi Paganini May 24, 2024 The use of Dynamic DNS (DDNS) services…
Google fixes eighth actively exploited Chrome zero-day this year
Google has released a new emergency security update to address the eighth zero-day vulnerability in Chrome browser confirmed to be actively exploited in the wild.…
Beware Of HTML That Masquerade As PDF Viewer Login Pages
Phishing attacks have evolved into increasingly sophisticated schemes to trick users into revealing their personal information. One such method that has gained prominence involves phishing emails masquerading as PDF viewer login pages. These deceptive emails lure unsuspecting users into entering their…
Effective GRC programs rely on team collaboration
One in three organizations are not currently able to proactively identify, assess, and mitigate risk with their GRC program, nor are they able to ensure…
Recall feature in Microsoft Copilot+ PCs raises privacy concerns
Recall feature in Microsoft Copilot+ PCs raises privacy and security concerns Pierluigi Paganini May 24, 2024 UK data watchdog is investigating Microsoft regarding the new…
Google fixes yet another Chrome zero-day exploited in the wild (CVE-2024-5274)
For the eighth time this year, Google has released an emergency update for its Chrome browser that fixes a zero-day vulnerability (CVE-2024-5274) with an in-the-wild…
ACMA Alleges Legal Action Following 2022 Optus Data Breach
Australian telco Optus faces legal battle with the country’s communications and media watchdog over the 2022 data breach. The Optus data breach resulted in the…