Category: Uncategorized
-
Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation [email protected] (The Hacker News)
Microsoft on Wednesday acknowledged that a newly disclosed critical security flaw in Exchange Server has been actively exploited in the wild, a day after it released fixes for the vulnerability as part of its Patch Tuesday updates. Tracked as CVE-2024-21410 (CVSS score: 9.8), the issue has been described as a case of privilege escalation impacting the Exchange Server.…
-
Cisco Announces It is Laying Off Thousands of Workers AFP
About 5 percent of Cisco’s global workforce will be affected by layoffs, the Silicon Valley-based company said. The post Cisco Announces It is Laying Off Thousands of Workers appeared first on SecurityWeek. Read More
-
Microsoft Catches APTs Using ChatGPT for Vuln Research, Malware Scripting Ryan Naraine
Microsoft threat hunters say foreign APTs are interacting with OpenAI’s ChatGPT to automate malicious vulnerability research, target reconnaissance and malware creation tasks. The post Microsoft Catches APTs Using ChatGPT for Vuln Research, Malware Scripting appeared first on SecurityWeek. Read More
-
Microsoft, OpenAI warn nation-state hackers are abusing LLMs
Post ContentRead More
-
South Korea Says Presumed North Korean Hackers Breached Personal Emails of Presidential Staffer Associated Press
South Korean President Yoon Suk Yeol’s office said presumed North Korean hackers breached the personal emails of one of his staff members. The post South Korea Says Presumed North Korean Hackers Breached Personal Emails of Presidential Staffer appeared first on SecurityWeek. Read More
-
Kubernetes Security Firm KTrust Emerges From Stealth With $5.3M in Funding Eduard Kovacs
Israel-based Kubernetes security firm KTrust emerges from stealth mode with $5.3 million in seed funding from VC Awz Ventures. The post Kubernetes Security Firm KTrust Emerges From Stealth With $5.3M in Funding appeared first on SecurityWeek. Read More
-
Microsoft, OpenAI Warn of Nation-State Hackers Weaponizing AI for Cyberattacks [email protected] (The Hacker News)
Nation-state actors associated with Russia, North Korea, Iran, and China are experimenting with artificial intelligence (AI) and large language models (LLMs) to complement their ongoing cyber attack operations. The findings come from a report published by Microsoft in collaboration with OpenAI, both of which said they disrupted efforts made by five state-affiliated actors that used itsRead More
-
Prudential Financial Discloses Data Breach Ionut Arghire
Prudential Financial says administrative and user data was compromised in a cyberattack earlier this month. The post Prudential Financial Discloses Data Breach appeared first on SecurityWeek. Read More
-
Ubuntu ‘command-not-found’ Tool Could Trick Users into Installing Rogue Packages [email protected] (The Hacker News)
Cybersecurity researchers have found that it’s possible for threat actors to exploit a well-known utility called command-not-found to recommend their own rogue packages and compromise systems running Ubuntu operating system. “While ‘command-not-found’ serves as a convenient tool for suggesting installations for uninstalled commands, it can be inadvertently manipulated by attackers through theRead More
-
Zoom Patches Critical Vulnerability in Windows Applications Ionut Arghire
Zoom patches seven vulnerabilities in its products, including a critical-severity bug in its Windows applications. The post Zoom Patches Critical Vulnerability in Windows Applications appeared first on SecurityWeek. Read More