Tag: tool
-
Prompt Fuzzer: Open-source tool for strengthening GenAI apps
Prompt Fuzzer is an open-source tool that evaluates the security of your GenAI application’s system prompt against dynamic LLM-based threats. Prompt F… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/29/prompt-fuzzer-open-source-genai-applications-security/
-
Finding Attack Vectors using API Linting
Learn how to weaponize developer tools used for API linting to find attack vectors in the APIs you are hacking. The post w to weaponize developer too… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/finding-attack-vectors-using-api-linting/
-
Russia’s Fancy Bear Pummels Windows Print Spooler Bug
The infamous Russian threat actor has created a custom tool called GooseEgg to exploit CVE-2022-38028 in cyber-espionage attacks against targets in Uk… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/russia-fancy-bear-pummels-windows-print-spooler-bug
-
Grafana Tool Vulnerability Let Attackers Inject SQL Queries
The popular open-source platform Grafana, widely used for monitoring and observability, has been found to contain a severe SQL injection vulnerability… First seen on gbhackers.com Jump to article: gbhackers.com/grafana-tool-vulnerability/
-
AI is creating a new generation of cyberattacks
Most businesses see offensive AI fast becoming a standard tool for cybercriminals, with 93% of security leaders expecting to face daily AI-driven atta… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/29/offensive-ai-cyberattacks/
-
LSA Whisperer: Open-source tools for interacting with authentication packages
LSA Whisperer consists of open-source tools designed to interact with authentication packages through their unique messaging protocols. Support is cur… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/26/lsa-whisperer-open-source-tools-for-interacting-with-authentication-packages/
-
Hackers Tool 29 Days from Initial Hack to Sabotage Ransomware Attack
Cybersecurity experts have meticulously traced the timeline of a sophisticated ransomware attack that spanned 29 days from the initial breach to the d… First seen on gbhackers.com Jump to article: gbhackers.com/hackers-tool-29-sabotage-ransomware-attack/
-
Microsoft Releases New-Open Source Tool for OT Security
ICSpector Is Now on GitHub, Scans PLCs, Extracts Info and Detects Malicious Code. Microsoft has released a new open-source security tool to close gaps… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/microsoft-releases-new-open-source-tool-for-ot-security-a-24961
-
New SSLoad Malware Combined With Tools Hijacking Entire Network Domain
A new attack campaign has been discovered to be employed by the FROZEN#SHADOW, which utilized SSLoad malware for its operations and Cobalt Strike Impl… First seen on gbhackers.com Jump to article: gbhackers.com/ssload-network-domination/
-
Analyze Malicious Powershell Scripts by Running Malware in ANY.RUN Sandbox
Hackers exploit PowerShell, a built-in scripting tool on Windows (and sometimes Linux), to launch various attacks. PowerShell scripts can download mal… First seen on gbhackers.com Jump to article: gbhackers.com/powershell-script-tracer_-analyze-powershell-execution/
-
73% of SME security pros missed or ignored critical alerts
Tags: toolSmall and medium-sized enterprises (SMEs) IT staff is overwhelmed by the complexity and demands of managing multiple tools in their security stack, le… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/25/73-of-sme-security-pros-missed-or-ignored-critical-alerts/
-
Open-Source Software Security
Open-source software security is crucial in today’s cloud-native world. Learn about vulnerabilities, dependencies, and tools to improve security in th… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/open-source-software-security/
-
Maximum severity Flowmon bug has a public exploit, patch now
Proof-of-concept exploit code has been released for a top-severity security vulnerability in Progress Flowmon, a tool for monitoring network performan… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/maximum-severity-flowmon-bug-has-a-public-exploit-patch-now/
-
Russian APT28 Exploiting Windows Vulnerability with GooseEgg Tool
First seen on hackread.com Jump to article: www.hackread.com/russia-apt28-windows-vulnerability-gooseegg-tool/
-
Dark web inundated by cheap ransomware tools
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/dark-web-inundated-by-cheap-ransomware-tools
-
North American Developers Optimistic About Generative AI and Code Security
North American software developers have reasonable confidence that generative AI can be a tool to improve the security of the software they’re buildin… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/n-a-developers-optimistic-about-generative-ai-and-code-security/
-
Sicherheitslücke in Putty: Rekonstruktion privater ECDSA-Schlüssel möglich
Angreifer können mit Putty verwendete Nist-P521-basierte Private Keys rekonstruieren. Auch andere Tools wie Filezilla, WinSCP und Tortoisegit sind anf… First seen on golem.de Jump to article: www.golem.de/news/sicherheitsluecke-in-putty-rekonstruktion-privater-ecdsa-schluessel-moeglich-2404-184208.html
-
AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs
New cybersecurity research has found that command-line interface (CLI) tools from Amazon Web Services (AWS) and Google Cloud can expose sensitive cred… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/aws-google-and-azure-cli-tools-could.html
-
Phishing Attacks Rise By 58% As The Attackers Leverage AI Tools
AI-powered generative tools have supercharged phishing threats, so even newbie attackers can effortlessly create refined, individualized campaigns. Pr… First seen on gbhackers.com Jump to article: gbhackers.com/phishing-attacks-rise-ai-tools/
-
N.A. Developers Optimistic About Generative AI and Code Security
Developers in North America are more likely than their counterparts in other regions to see generative AI as a tool that can improve the security of t… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/n-a-developers-optimistic-about-generative-ai-and-code-security/
-
Open Source Tool Looks for Signals in Noisy AWS Cloud Logs
Permiso Security announced Cloud Console Cartographer during Black Hat Asia to help defenders look inside Amazon Web Services events logs for signs of… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/open-source-tool-looks-signals-in-noisy-aws-cloud-logs
-
Countering Voice Fraud in the Age of AI
Caller ID spoofing and AI voice deepfakes are supercharging phone scams. Fortunately, we have tools that help organizations and people protect themsel… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/countering-voice-fraud-in-the-age-of-ai
-
Sophisticated tool arsenal enables widespread ToddyCat data compromise
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/sophisticated-tool-arsenal-enables-widespread-toddycat-data-compromise
-
Novel tool leveraged by APT28 to exploit old Windows vulnerability
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/novel-tool-leveraged-by-apt28-to-exploit-old-windows-vulnerability
-
Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw
Russia-linked APT28 group used a previously unknown tool, dubbed GooseEgg, to exploit Windows Print Spooler service flaw. Microsoft reported that the … First seen on securityaffairs.com Jump to article: securityaffairs.com/162154/apt/apt28-gooseegg-tool-win-bug.html
-
Nagomi Security Emerges From Stealth With $30 Million in Funding
Nagomi Security, a company that helps customers prevent threats by leveraging existing security tools, emerged from stealth with $30 million in fundin… First seen on securityweek.com Jump to article: www.securityweek.com/nagomi-security-emerges-from-stealth-with-30-million-in-funding/
-
Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)
For nearly four years and perhaps even longer, Forest Blizzard (aka Fancy Bear, aka APT28) has been using a custom tool that exploits a specific vulne… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/23/cve-2022-38028-exploits/
-
New tool used in China-linked attacks against Asia-Pacific
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/new-tool-used-in-china-linked-attacks-against-asia-pacific
-
6 Top Open-Source Vulnerability Scanners Tools
Open-source vulnerability scanners identify security vulnerabilities in apps, networks, and systems. Compare features and functionalities with our gui… First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/applications/open-source-vulnerability-scanners/
-
Russian Hackers Exploiting Windows Print Spooler Vuln
Tags: credentials, exploit, hacker, intelligence, microsoft, military, russia, tool, vulnerability, windowsMicrosoft Warns APT28’s GooseEgg Tool Enables Credential Theft. Russian military intelligence hackers are using an 18 month-old vulnerability in the W… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/russian-hackers-exploiting-windows-print-spooler-vuln-a-24929