Tag: malicious
-
‘CrossBarking’ Attack Targeted Secret APIs, Exposing Opera Browser Users
Using a malicious Chrome extension, researchers showed how an attacker could use a now-fixed bug to inject custom code into a victim’s Opera browser t… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/crossbarking-attack-secret-apis-expose-opera-browser-users
-
Everything You Need to Know about the Malvertising Cybersecurity Threat
Malvertising is a shortened mash-up of malicious advertising. In a nutshell, malvertising is a relatively new cyberattack method in which bad actors i… First seen on techrepublic.com Jump to article: www.techrepublic.com/resource-library/downloads/malvertising-cybersecurity-threat/
-
Supply Chain Attack on Popular Animation Library Lottie-Player Targets Web3 Users
In a sophisticated supply chain attack, malicious actors infiltrated the widely-used JavaScript library lottie-player, injecting code that opens a Web… First seen on securityonline.info Jump to article: securityonline.info/supply-chain-attack-on-popular-animation-library-lottie-player-targets-web3-users/
-
Embargo Ransomware Actors Abuses Safe Mode To Disable Security Solutions
In July 2024, the ransomware group Embargo targeted US companies using the malicious loader MDeployer and EDR killer MS4Killer. MDeployer deployed MS4… First seen on gbhackers.com Jump to article: gbhackers.com/embargo-ransomware-safe-mode-exploit/
-
This Prompt Can Make an AI Chatbot Identify and Extract Personal Details From Your Chats
Security researchers created an algorithm that turns a malicious prompt into a set of hidden instructions that could send a user’s personal informatio… First seen on wired.com Jump to article: www.wired.com/story/ai-imprompter-malware-llm/
-
BeaverTail Malware Spreads via Malicious npm Packages
First seen on scworld.com Jump to article: www.scworld.com/brief/beavertail-malware-spreads-via-malicious-npm-packages
-
‘CrossBarking’ Attack Targets Secret APIs, Exposes Opera Browser Users
Using a malicious Chrome extension, researchers showed how an attacker could use a now-fixed bug to inject custom code into a victim’s Opera browser t… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/crossbarking-attack-secret-apis-expose-opera-browser-users
-
Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor
Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private … First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/malicious-npm-packages-target.html
-
Russian hackers deliver malicious RDP configuration files to thousands
Tags: blizzard, cyber, espionage, government, group, hacker, intelligence, malicious, russia, serviceMidnight Blizzard a cyber espionage group that has been linked to the Russian Foreign Intelligence Service (SVR) is targeting government, academia, de… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/30/midnight-blizzard-spearphishing-rdp-file/
-
Malicious npm packages spread BeaverTail malware
First seen on scworld.com Jump to article: www.scworld.com/brief/malicious-npm-packages-spread-beavertail-malware
-
LottieFiles hit in npm supply chain attack targeting users’ crypto
LottieFiles announced that specific versions of its npm package carry malicious code that prompts users to connect their cryptocurrency wallets so the… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/lottiefiles-hit-in-npm-supply-chain-attack-targeting-users-crypto/
-
Tricky CAPTCHA Caught Dropping Lumma Stealer Malware
The persistent infostealer’s latest campaign inserts fake CAPTCHA pages into legitimate applications, fooling users into executing the malicious paylo… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/trick-captcha-lumma-stealer-malware
-
ChatGPT Jailbreak: Researchers Bypass AI Safeguards Using Hexadecimal Encoding and Emojis
New jailbreak technique tricked ChatGPT into generating Python exploits and a malicious SQL injection tool. The post ChatGPT Jailbreak: Researchers By… First seen on securityweek.com Jump to article: www.securityweek.com/first-chatgpt-jailbreak-disclosed-via-mozillas-new-ai-bug-bounty-program/
-
ClickFix Malware Infect Website Visitors Via Hacked WordPress Websites
Researchers have identified a new variant of the ClickFix fake browser update malware distributed through malicious WordPress plugins. These plugins, … First seen on gbhackers.com Jump to article: gbhackers.com/clickfix-malware-hacked-wordpress/
-
A good cyber leader prioritizes the greater good
In the war against malicious cyber activity, it’s time for security vendors to step in and it’s not how you might think. CISA Director Jen Easterly pu… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/28/good-cyber-leader-responsibility/
-
Spooky Spam, Scary Scams: Halloween Threats Rise
Halloween-themed spam has risen sharply this season, with Bitdefender reporting that 40% of these emails contain malicious content designed to scam us… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/spooky-spam-scary-scams-halloween-threats-rise/
-
More Than Just a Corporate Wiki? How Threat Actors are Exploiting Confluence
Recently, the Cofense Phishing Defense Center (PDC) has seen an increase in malicious emails utilizing legitimate third-party business software to eva… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/more-than-just-a-corporate-wiki-how-threat-actors-are-exploiting-confluence/
-
New Malware WarmCookie Targets Users with Malicious Links
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/malware-warmcookie-users-malicious/
-
Racist Network Rail Wi-Fi hack was work of malicious insider
Police have revealed that this week’s racist cyber attack on public Wi-Fi networks at stations across the UK appears to have been the work of a malici… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366612056/Racist-Network-Rail-Wi-Fi-hack-work-of-malicious-insider
-
Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity
Threat actors are attempting to abuse the open-source EDRSilencer tool as part of efforts to tamper endpoint detection and response (EDR) solutions an… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/hackers-abuse-edrsilencer-tool-to.html
-
Google Patches Multiple Chrome Security Vulnerabilities
Google has released several security patches for its Chrome browser, addressing critical vulnerabilities that malicious actors could exploit. The upda… First seen on gbhackers.com Jump to article: gbhackers.com/multiple-chrome-security-vulnerabilities/
-
How to enable Safe Browsing in Google Chrome on Android
To safeguard your data, Google Chrome uses Safe Browsing to protect you from: harmful websites and extensions, malicious or intrusive advertisements, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/24/how-to-enable-safe-browsing-in-google-chrome-on-android/
-
Phishing scams and malicious domains take center stage as the US election approaches
Phishing scams aimed at voters, malicious domain registrations impersonating candidates, and other threat activity designed to exploit unassuming vict… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/22/us-election-phishing-activity/
-
Severe flaws in E2EE cloud storage platforms used by millions
Several end-to-end encrypted (E2EE) cloud storage platforms are vulnerable to a set of security issues that could expose user data to malicious actors… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/severe-flaws-in-e2ee-cloud-storage-platforms-used-by-millions/
-
Critical Chrome Vulnerabilities Let Malicious Apps Run Shell Command on Your PC
Researchers discovered vulnerabilities in the Chromium web browser that allowed malicious extensions to escape the sandbox and execute arbitrary code … First seen on gbhackers.com Jump to article: gbhackers.com/chrome-vulnerabilities-shell-execution/
-
Bumblebee Malware Loader Resurfaces Following Law Enforcement Takedown
New malicious campaign suggests the Bumblebee malware loader might be resurfacing following the May 2024 law enforcement takedown. The post Bumblebee … First seen on securityweek.com Jump to article: www.securityweek.com/bumblebee-malware-loader-resurfaces-following-law-enforcement-takedown/
-
ConfusedPilot Attack Can Manipulate RAG-Based AI Systems
Attackers can introduce a malicious document in systems such as Microsoft 365 Copilot to confuse the system, potentially leading to widespread misinfo… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/confusedpilot-attack-manipulate-rag-based-ai-systems
-
OpenAI Blocks 20 Global Malicious Campaigns Using AI for Cybercrime and Disinformation
OpenAI on Wednesday said it has disrupted more than 20 operations and deceptive networks across the world that attempted to use its platform for malic… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/openai-blocks-20-global-malicious.html