Latest Cybersecurity News and Articles

---

Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution

A fresh round of patches has been made available for the vm2 JavaScript library to address two critical flaws that could be exploited to break out of the sandbox protections. Both the flaws – CVE-2023-29199 and CVE-2023-30547 – are rated 9.8 out of 10 on the CVSS scoring system and have been addressed in versions 3.9.16 and 3.9.17, respectively. Successful exploitation of the bugs, which allow

---

Cyber experts warn of rising threat from irresponsible use of commercial hacking tools over the next five years

New report from the NCSC assesses the threat to UK industry and society from the use of commercial cyber tools and services.

---

Heightened threat of state-aligned groups against western critical national infrastructure

This alert highlights the emerging risk posed by state-aligned adversaries following the Russian invasion of Ukraine.

---

NCSC warns of emerging threat to critical national infrastructure

Alert issued warns of the emerging threat from state-aligned groups and the different forms of activity.

---

What to know: New AI rules in the U.S.

EXECUTIVE SUMMARY: As the fastest-growing consumer application in history, with more than 100 million monthly active users, ChatGPT has gained the attention of lawmakers and policy analysts around the world. Due to the wave of interest in the technology, the U.S. National Telecommunications and Information Administration (NTIA) is asking for public input regarding how to […] The post What to know: New AI rules in the U.S. appeared first on CyberTalk.

---

Giving a Face to the Malware Proxy Service ‘Faceless’

For the past seven years, a malware-based proxy service known as "Faceless" has sold anonymity to countless cybercriminals. For less than a dollar per day, Faceless customers can route their malicious traffic through tens of thousands of compromised systems advertised on the service. In this post we'll examine clues left behind over the past decade by the proprietor of Faceless, including some that may help put a face to the name.

---

CISO insights on ChatGPT: Game-changer or security threat?

EXECUTIVE SUMMARY: As the AI revolution continues to sweep the world, OpenAI’s ChatGPT tool has emerged as a groundbreaking force in the realm of natural language processing. With applications spanning across industries and organizations, the possibilities sometimes seem limitless. But with the widespread adoption of AI language models, ChatGPT, and adjacent technologies, concerns around data […] The post CISO insights on ChatGPT: Game-changer or security threat? appeared first on CyberTalk.

---

Ex-Conti Members and Fin7 APT Join Hands for New Domino Backdoor

The now-defunct Conti ransomware gang members were observed deploying a new malware strain, dubbed Domino, that appears to have been developed by the FIN7 cybercrime organization. Domino has been active in the wild since at least October 2022. Organizations and security teams need a robust Threat Intelligence Platform (TIP) to identify and understand the scope and extent of such attacks.

---

Introducing DevOpt: A Multifunctional Backdoor Arsenal

The malware is currently still in development and is receiving continuous improvement updates designed to make it a more potent and effective tool for attackers and a threat to defenders.

---

FBI warns of juice jacking at public charge stations

As business travel rises companies need to remind employees of security risks of plugging in any type of portable media or connected cables.

---

Eighty-one percent of organizations use at least one cloud environment

Recent cybersecurity trends were analyzed in a report revealing that 68% of organizations experienced a known cyberattack within the last 12 months.

---

in2al5d p3in4er is Almost Completely Undetectable

The component that makes Aurora’s delivery stealthy and dangerous is a highly evasive loader we named “in2al5d p3in4er.” It is compiled with Embarcadero RAD Studio and targets endpoint workstations using an advanced anti-VM technique.

---

New sandbox escape PoC exploit available for VM2 library, patch now

A security researcher has released, yet another sandbox escape proof of concept (PoC) exploit that makes it possible to execute unsafe code on a host running the VM2 sandbox.

---

AI tools like ChatGPT expected to fuel BEC attacks

Across all BEC attacks seen over the past year, 57% of them relied on language as the main attack vector to get them in front of unsuspecting employees, according to Armorblox.

---

Iranian Hackers Using SimpleHelp Remote Support Software for Persistent Access

While the nation-state group has previously employed ScreenConnect, RemoteUtilities, and Syncro, a new analysis from Group-IB has revealed the adversary's use of the SimpleHelp remote support software in June 2022.

---

IT staffing shortages concern healthcare organizations

The covid-19 pandemic has greatly affected the healthcare industry, including staffing shortages within IT departments that put organizations at risk.

---

Hackers Publish Sensitive Employee Data Stolen During CommScope Ransomware Attack

The North Carolina–based company, which designs and manufactures network infrastructure products for a range of customers, including hospitals, schools, and U.S. federal agencies, was listed on the data leak site of the Vice Society ransomware gang.

---

YouTube Videos Distributing Aurora Stealer Malware via Highly Evasive Loader

Cybersecurity researchers have detailed the inner workings of a highly evasive loader named "in2al5d p3in4er" (read: invalid printer) that's used to deliver the Aurora information stealer malware. "The in2al5d p3in4er loader is compiled with Embarcadero RAD Studio and targets endpoint workstations using advanced anti-VM (virtual machine) technique," cybersecurity firm Morphisec said in a report

---

PowerShell Data Theft: Vice Society Ransomware's Latest Weapon

Researchers revealed that the Vice Society ransomware group is utilizing a specialized tool based on PowerShell to escape detection and automate the data extraction process. With the adoption of increasingly sophisticated tools, Vice Society has become a formidable threat to organizations globally.

---

DeFi Protocol Hundred Finance Loses $7M in Latest Exploit

Hundred Finance confirmed the exploit on April 15, noting that it had contacted the hacker for negotiations. The platform is also working with security teams to resolve the issue and has urged anyone with information on the incident to reach out.