Tag: tool
-
Despite Bans, AI Code Tools Widespread in Organizations
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-code-tools-widespread-in/
-
Ghostscript Vulnerability Actively Exploited in Attacks
A significant remote code execution (RCE) vulnerability was identified in the Ghostscript library, a widely used tool on Linux systems. This vulnerabi… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/ghostscript-vulnerability-actively-exploited-in-attacks/
-
New Specula tool uses Outlook for remote code execution in Windows
Microsoft Outlook can be turned into a C2 beacon to remotely execute code, as demonstrated by a new red team post-exploitation framework named Specula… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-specula-tool-uses-outlook-for-remote-code-execution-in-windows/
-
Unveiling SpiceRAT: SneakyChef’s latest tool targeting EMEA and Asia
Cisco Talos discovered a new remote access trojan (RAT) dubbed SpiceRAT, used by the threat actor SneakyChef in a recent campaign targeting government… First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/new-spicerat-sneakychef/
-
Hacker Attacking Bank Users With AI-powered Phishing Tools and Android Malware
Cybersecurity firm Group-IB has uncovered a sophisticated cybercrime operation targeting Spanish banking customers. The criminal group GXC Team has be… First seen on gbhackers.com Jump to article: gbhackers.com/hacker-attacking-bank-users-with-ai/
-
Cirrus: Open-source Google Cloud forensic collection
Cirrus is an open-source Python-based tool designed to streamline Google Cloud forensic evidence collection. It can streamline environment access and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/29/cirrus-open-source-google-cloud-forensic-evidence-collection/
-
Misconfigured Selenium Grid servers abused for Monero mining
Threat actors are exploiting a misconfiguration in Selenium Grid, a popular web app testing framework, to deploy a modified XMRig tool for mining Mone… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/misconfigured-selenium-grid-servers-abused-for-monero-mining/
-
Centraleyes Privacy Framework (CPF)
What is the CPF? The Centraleyes Privacy Framework (CPF) is a comprehensive compliance tool designed to help organizations adhere to the diverse priva… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/centraleyes-privacy-framework-cpf/
-
DataDome to Demo Discover, an Innovative Tool to Eliminate Cyberfraud Blind Spots, at Black Hat USA 2024
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/datadome-to-demo-discover-an-innovative-tool-to-eliminate-cyberfraud-blind-spots-at-black-hat-usa-2024/
-
CISA discloses breach of Chemical Security Assessment Tool
CISA first disclosed the breach in March, which stemmed from Ivanti zero-day vulnerabilities that were first exploited in January by a Chinese nation-… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366589568/CISA-discloses-breach-of-Chemical-Security-Assessment-Tool
-
Week in review: CrowdStrike-triggered outage insights, recovery, and measuring cybersecurity ROI
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft releases tool to speed up recovery of syst… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/28/week-in-review-crowdstrike-triggered-outage-insights-recovery-and-measuring-cybersecurity-roi/
-
Under-Resourced Maintainers Pose Risk to Africa’s Open Source Push
Many nations see open source software as a great equalizer, giving the Global South the tools necessary for sustainable development. But recent supply… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/under-resourced-maintainers-pose-risk-to-africas-open-source-push
-
Skeleton Key: Microsoft warnt vor GenAI-Jailbreak
Generative KI-Tools sind mit Sicherheitsfunktionen ausgestattet, um bösartige Benutzeranfragen zu verhindern. Microsoft hat jedoch ein Schlupfloch ent… First seen on csoonline.com Jump to article: www.csoonline.com/de/a/microsoft-warnt-vor-genai-jailbreak
-
Kostenloses Tool zur Erkennung von Schwachstellen aus der Sicht eines Hackers
Der Anbieter der weltweit größten Plattform für Sicherheitsschulungen und Phishing-Simulationen, KnowBe4, gibt die Veröffentlichung von … First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/07/18/kostenloses-tool-zur-erkennung-von-schwachstellen-aus-der-sicht-eines-hackers/
-
Who are Qilin, the cybercriminals thought behind the London hospitals hack?
Russian-speaking ransomware gang lets hackers use its tools in exchange for cut of proceeds</p><p>A Russian-speaking ransomware criminal g… First seen on theguardian.com Jump to article: www.theguardian.com/technology/article/2024/jun/05/who-are-qilin-the-cybercriminals-thought-behind-the-london-hospitals-hack
-
CrowdStrike Aftermath: Three features telcos need from specialized EDR tools
First seen on scmagazine.com Jump to article: www.scmagazine.com/perspective/three-features-telcos-need-from-specialized-edr-tools
-
TAG-100: New Threat Actor Uses Open-Source Tools for Widespread Attacks
Unknown threat actors have been observed leveraging open-source tools as part of a suspected cyber espionage campaign targeting global government and … First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/tag-100-new-threat-actor-uses-open.html
-
Tech Giants Agree to Standardize AI Security
The Coalition for Secure AI is a consortium of influential AI companies aiming to develop tools to secure AI applications and set up an ecosystem for … First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/tech-giants-agree-to-standardize-ai-security
-
USENIX Security ’23 WHIP: Improving Static Vulnerability Detection in Web Application by Forcing tools to Collaborate
Authors/Presenters:Feras Al-Kassar, Luca Compagna, Davide Balzarotti Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presen… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/usenix-security-23-whip-improving-static-vulnerability-detection-in-web-application-by-forcing-tools-to-collaborate/
-
Admin-Lücke bedroht Palo Alto Networks Migration-Tool Expedition
First seen on heise.de Jump to article: www.heise.de/news/Admin-Luecke-bedroht-Palo-Alto-Networks-Migration-Tool-Expedition-9800845.html
-
FIN7 Group Advertises Security-Bypassing Tool on Dark Web Forums
The financially motivated threat actor known as FIN7 has been observed using multiple pseudonyms across several underground forums to likely advertise… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/fin7-group-advertises-security.html
-
Digital Transformation EXPO (DTX) Your Home of Digital Transformation
DTX brings together creative minds and technology practitioners with the tools needed to drive change, enhance experiences and improve efficiencies ac… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/07/17/digital-transformation-expo-dtx-your-home-of-digital-transformation/
-
Microsoft Releases Tool to Fix CrowdStrike-Caused Windows Chaos
First seen on hackread.com Jump to article: hackread.com/microsoft-releases-tool-fix-crowdstrike-windows-chaos/
-
Microsoft-Signed Chinese Adware Opens the Door to Kernel Privileges
An official stamp of approval might give the impression that a purported HotPage adtech tool is not, in fact, a dangerous kernel-level malware, but th… First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/microsoft-signed-chinese-adware-opens-the-door-to-kernel-privileges
-
SSH-Snake Tool Used in Data Exfiltration Attacks
A new threat actor is finding success in relying on open-source software (OSS) security tools and a networking mapping tool called SSH-Snake in its ca… First seen on duo.com Jump to article: duo.com/decipher/ssh-snake-tool-used-in-data-exfiltration-attacks
-
What Is Cloud Database Security? Types, Best Practices Tools
First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cloud/cloud-database-security/
-
Iranian Cyber-Threat Group Drops New Backdoor, ‘BugSleep’
The group, which has targeted Israel, Saudi Arabia, and other nations, often uses spear-phishing and legitimate remote management tools but is develop… First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/iranian-threat-group-drops-new-backdoor-bugsleep
-
Mehr als ein Drittel der sensiblen Geschäftsinformationen, die in generative KI-Apps eingegeben werden, sind persönliche Daten
Netskope veröffentlicht eine neue Studie, aus der hervorgeht, dass mehr als ein Drittel der sensiblen Daten, die mit generativen KI-Tools ausgetausch… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/07/17/mehr-als-ein-drittel-der-sensiblen-geschaeftsinformationen-die-in-generative-ki-apps-eingegeben-werden-sind-persoenliche-daten/
-
Forensik-Tool Cellebrite: Diese Smartphones kann das FBI knacken
Tags: toolKürzlich hat das FBI das Smartphone des Trump-Attentäters geknackt. Geleakte Dokumente von Cellebrite zeigen, bei welchen Geräten das grundsätzlich mö… First seen on golem.de Jump to article: www.golem.de/news/forensik-tool-cellebrite-diese-smartphones-kann-das-fbi-knacken-2407-187199.html
-
The CISO’s approach to AI: Balancing transformation with trust
As organizations increasingly adopt third-party AI tools to streamline operations and gain a competitive edge, they also invite a host of new risks. M… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/23/establishing-ai-tools-guardrails/