Tag: tool
-
Pindrop Security Raises $100 Million to Expand Deepfake Detection Technology
The additional funds will be used to further the development of new tools to counter the expanding threat of AI-generated voice deepfakes. The post Pi… First seen on securityweek.com Jump to article: www.securityweek.com/pindrop-security-raises-100-million-to-expand-deepfake-detection-technology/
-
Safeguarding Your Collaboration Tools: Tackling the New Favorite Targets of Attackers
Secrets in collaboration tools are becoming prime targets for attackers. Reduce your attack surface by extending GitGuardian automated secrets detecti… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/safeguarding-your-collaboration-tools-tackling-the-new-favorite-targets-of-attackers/
-
Dark Gate malware campaign uses Samba file shares
A Dark Gate malware campaign from March-April 2024 demonstrates how attackers exploit legitimate tools and services to distribute malware. Palo Alto N… First seen on securityaffairs.com Jump to article: securityaffairs.com/165723/malware/dark-gate-malware-uses-samba-file-shares.html
-
SEG vs. SEG: How Threat Actors are Pitting Email Security Products Against Each Other With Encoded URLs
Email security tools such as Secure Email Gateways (SEGs) often encode URLs that are embedded in emails. This enables the security appliance to scan t… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/seg-vs-seg-how-threat-actors-are-pitting-email-security-products-against-each-other-with-encoded-urls/
-
Top 10 Compliance Automation Tools for 2024: An In-Depth Comparison
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/top-10-compliance-automation-tools-for-2024-an-in-depth-comparison/
-
Critical OpenSSH Vulnerability (regreSSHion) Gives Root Access
An unauthenticated remote code execution vulnerability (CVE-2024-6387) was discovered in OpenSSH, a widely used tool for secure remote access. Dubbed … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/critical-openssh-vulnerability-regresshion-gives-root-access/
-
Privacy & Security Concerns With AI Meeting Tools
Businesses need to find a balance between harnessing the benefits of AI assistants and safeguarding sensitive information, maintaining trust with empl… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/privacy-security-concerns-with-ai-meeting-tools
-
Tick APT-Gruppe attackiert DLP-Softwareentwickler in Ostasien
arch hat eine Kampagne der APT-Gruppe Tick gegen ein Unternehmen in Ostasien aufgedeckt und ein bisher unbekanntes Tool gefunden, das von der Gruppe v… First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2023/03/14/tick-apt-gruppe-attackiert-dlp-softwareentwickler-in-ostasien/
-
Akira Ransomware Attacking Airline Industry With Legitimate Tools
Airlines often become the target of hackers as they contain sensitive personal and financial details of passengers as well as travel schedules and loy… First seen on gbhackers.com Jump to article: gbhackers.com/akira-ransomware-attacks-airline-industry/
-
Palo Alto Networks fixed a critical bug in the Expedition tool
Palo Alto Networks addressed five vulnerabilities impacting its products, including a critical authentication bypass issue. Palo Alto Networks release… First seen on securityaffairs.com Jump to article: securityaffairs.com/165641/security/palo-alto-networks-critical-bug-expedition.html
-
Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool
Unknown threat actors have been observed exploiting a now-patched security flaw in Microsoft MSHTML to deliver a surveillance tool called MerkSpy as p… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/microsoft-mshtml-flaw-exploited-to.html
-
CRYSTALRAY Group Targets 1,500 Organizations in 6 Months
Relatively New Threat Actor Uses Open-Source Tools, Focuses on US and China. A relatively new threat actor has compromised over 1,500 organizations wo… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/crystalray-group-targets-1500-organizations-in-6-months-a-25759
-
‘CrystalRay’ Expands Arsenal, Hits 1,500 Targets with SSH-Snake and Open Source Tools
A threat actor tracked as CrystalRay has hit 1,500 victims since February, stealing credentials and deploying backdoors. The post ‘CrystalRay’ Expands… First seen on securityweek.com Jump to article: www.securityweek.com/crystalray-expands-arsenal-hits-1500-targets-with-ssh-snake-and-open-source-tools/
-
Top 10 Active Directory Management Tools 2024
Tags: toolActive Directory Management Tools are essential for IT administrators to manage and secure Active Directory (AD) environments efficiently. These tools… First seen on gbhackers.com Jump to article: gbhackers.com/active-directory-management-tools/
-
CrystalRay operations have scaled 10x to over 1,500 victims
A threat actor known as CrystalRay targeted 1,500 victims since February using tools like SSH-Snake and various open-source utilities. The Sysdig Thre… First seen on securityaffairs.com Jump to article: securityaffairs.com/165607/cyber-crime/crystalray-operations-scaled-10x.html
-
CRYSTALRAY hacker expands to 1,500 breached systems using SSH-Snake tool
A new threat actor known as CRYSTALRAY has significantly broadened its targeting scope with new tactics and exploits, now counting over 1,500 victims … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/crystalray-hacker-expands-to-1-500-breached-systems-using-ssh-snake-tool/
-
Schlag gegen Cobalt-Strike-Missbrauch: Behörden nehmen 593 Server vom Netz
Hacker setzen das Pentesting-Tool Cobalt Strike häufig ein, um fremde Systeme zu infiltrieren. Fast 600 mit diesem Missbrauch verbundene IP-Adressen s… First seen on golem.de Jump to article: www.golem.de/news/schlag-gegen-cobalt-strike-missbrauch-behoerden-nehmen-593-server-vom-netz-2407-186702.html
-
Software Productivity Tools Hijacked to Deliver Infostealers
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/software-productivity-tools-hijacked-to-deliver-infostealers
-
CISA offers tools to promote secure use of open-source software
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/cisa-offers-tools-to-promote-secure-use-of-open-source-software
-
Palo Alto Networks Addresses BlastRADIUS Vulnerability, Fixes Critical Bug in Expedition Tool
Palo Alto Networks patched a critical vulnerability in its Expedition tool and addressed the impact of the recently disclosed BlastRADIUS vulnerabilit… First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-addresses-blastradius-vulnerability-fixes-critical-bug-in-expedition-tool/
-
9 unverzichtbare Open Source Security Tools
First seen on csoonline.com Jump to article: www.csoonline.com/de/a/9-unverzichtbare-open-source-security-tools
-
Diversifying cyber teams to tackle complex threats
Technologies such as GenAI, ML and IoT are giving threat actors new tools that make it easier to target consumers and organizations. From Savvy Seahor… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/10/diverse-cyber-workforce/
-
The 6 Best Governance, Risk Compliance (GRC) Tools for 2024
First seen on techrepublic.com Jump to article: www.techrepublic.com/article/grc-tools/
-
PortSwigger, the company behind the Burp Suite of security testing tools, swallows $112M
Sometimes the most successful startup ideas come from people building tools to solve their own needs. Such was the case with Dafydd Stuttard, a securi… First seen on techcrunch.com Jump to article: techcrunch.com/2024/06/27/portswigger-the-company-behind-the-burp-suite-of-security-testing-tools-swallows-112m/
-
Hard Truths about Remote Access Hardware VPNs
Hardware VPNs are the primary method the enterprise uses to connect remote, or what we now call the hybrid workforce, to the IT tools that power our d… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/hard-truths-about-remote-access-hardware-vpns/
-
On Point: Risk Management Strategies for AI Tools
What to Do to Protect the Sensitive Data You Submit to Online AI Tools Artificial intelligence tools are both a blessing and a curse for companies. Th… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/on-point-risk-management-strategies-for-ai-tools-p-3655
-
A Guide to Lockdown of Salesforce Links
Collaboration and cooperation are among the key benefits Salesforce offers its customers. The application’s sharing tools are typical of any cloud-bas… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/a-guide-to-lockdown-of-salesforce-links/
-
Malware in Open Source-Software: Wie groß ist die Bedrohung der IT-Sicherheit wirklich?
Im März 2024 machte die Entdeckung einer Backdoor in den zur Komprimierung genutzten xz-Tools und Bibliotheken Schlagzeilen. Aber wie groß ist die Bed… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/07/08/malware-in-open-source-software-wie-gro-ist-die-bedrohung-der-it-sicherheit-wirklich/
-
Securing Developer Tools: Unpatched Code Vulnerabilities in Gogs (2/2)
Learn about critical code vulnerabilities we discovered in Gogs, a source code hosting solution. This follow-up covers how less severe flaws can still… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-2-2/
-
Limitations of current automatic specification generation tools
Tags: toolFirst seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/limitations-of-current-automatic-specification-generation-tools/