Latest Cybersecurity News and Articles
30 March 2023
Over the past few months, threat actors have been spreading ShellBot and Moobot malware on exploitable servers. Compromised victims can be controlled and used as DDoS bots after receiving a command from a C2 server.
30 March 2023
A researcher was able to bypass OpenAI’s fix for the original account takeover issue, using a new payload, and discovered that all ChatGPT APIs were vulnerable to the bypass.
30 March 2023
A recent update introduced a new SafeMoon smart contract function that burns tokens. Unfortunately, the function was mistakenly set to the public without restrictions, allowing anyone to execute it as they wished.
30 March 2023
3CX said it's working on a software update for its desktop app after multiple cybersecurity vendors sounded the alarm on what appears to be an active supply chain attack that's using digitally signed and rigged installers of the popular voice and video conferencing software to target downstream customers.
"The trojanized 3CX desktop app is the first stage in a multi-stage attack chain that pulls
29 March 2023
NCSC CEO Lindy Cameron reflects on the importance of Board-level engagement with cyber security.
29 March 2023
Refreshed guidance from the NCSC will support board members govern online risk.
29 March 2023
EXECUTIVE SUMMARY: In today’s fast-paced financial services industry, banks and other financial institutions are looking for new ways to improve efficiency, reduce costs and enhance the customer experience. One emerging technology that’s quickly gaining traction is ChatGPT, a sophisticated chatbot powered by artificial intelligence. ChatGPT can be integrated into existing systems and applications to help […]
The post 10 ways ChatGPT is disrupting the financial services industry appeared first on CyberTalk.
29 March 2023
By Devin Partida, Editor-in-Chief, Rehack.com. There’s no question that cyber security is becoming a top concern for virtually every company, regardless of industry. Both small businesses and large corporations must prioritize their cyber security strategies in such a way as to to protect their assets in the increasingly threatening landscape. Despite the growing importance surrounding […]
The post Promoting company success with AI-based talent recruitment appeared first on CyberTalk.
29 March 2023
The nuclear energy sector of China is reportedly facing threats from Bitter, a South Asian APT. The group specializes in using Excel exploits, Windows Installer (MSI) files, and Microsoft Compiled HTML Help (CHM) files. Besides, the group is infamous for targeting energy and government organizations in Bangladesh, Pakistan, China, and Saudi Arabia.
29 March 2023
In this exclusive interview, Senior Vice President of Business Development and Security Strategy at TD SYNNEX, Jessica McDowell, shares a bit about her role leading go-to-market programs and supporting the success of more than 100 vendors. She also provides insights into how she reached the executive-level and how others can follow a similar path, emphasizing […]
The post Exclusive interview: TD SYNNEX SVP in honor of Women’s History Month appeared first on CyberTalk.
29 March 2023
MacStealer is a new information-stealing malware threat attempting to pilfer sensitive information from compromised macOS devices. The malware uses Telegram as its C2 channel and specifically affects devices running Catalina and later versions on M1 and M2 CPUs. It can harvest documents, browser cookies, and login information from individuals.
29 March 2023
As seen with past attacks from this group, these most recent attacks do not seem to be originating from a single botnet, and the attack methods and sources seem to vary, suggesting the involvement of multiple individual threat actors.
29 March 2023
The report also found that 80% of attacks happened over authenticated APIs, making it a widespread problem for all. Given that it is one of the easiest types of attack to execute, it is no surprise that attackers are increasingly taking this route.
29 March 2023
A new report reveals a turbulent year in the threat actor community as Russia’s invasion of Ukraine disrupted the operations of top ransomware groups.
29 March 2023
ENISA says the three dominant threats to the transportation sector are ransomware (38 percent), data-related threats (30 percent), and malware (17 percent). However, each subgroup has reported experiencing other attack types than ransomware.
29 March 2023
In this blog, researchers have shared details about two distinct campaigns that used various 0-day exploits against Android, iOS, and Chrome and were both limited and highly targeted.
29 March 2023
Mélofée's features are no different from other backdoors of its kind, enabling it to contact a remote server and receive instructions that allow it to carry out file operations, create sockets, launch a shell, and execute arbitrary commands.
29 March 2023
The ransomware attack hit Technion on February 12, forcing the university to block all communication networks. DarkBit originally demanded 80 bitcoins as ransom from the university.
29 March 2023
Powered by OpenAI’s GPT-4 generative AI and Microsoft’s security-specific model, Security Copilot looks like a simple prompt box like any other chatbot. You can ask “what are all the security incidents in my enterprise?”
29 March 2023
A number of zero-day vulnerabilities that were addressed last year were exploited by commercial spyware vendors to target Android and iOS devices, Google's Threat Analysis Group (TAG) has revealed.
The two distinct campaigns were both limited and highly targeted, taking advantage of the patch gap between the release of a fix and when it was actually deployed on the targeted devices.
"These