Category Security

A wave of emails masquerading as Starbucks offers have been circulating, promising coffee drinkers a free Starbucks Coffee Lovers Box. Action Fraud, the UK’s national fraud and cyber reporting center, said it has received over 900 reports about the scam…

Oct 16, 2024Ravie LakshmananZero-Day / Windows Security The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devices with malware known as RokRAT. The vulnerability in…

A sharp rise in hackers’ confidence in AI technologies has been revealed in the Inside the Mind of a Hacker 2024 report, published today by Bugcrowd. The study, which gathered insights from 1300 ethical hackers and security researchers, shows that…

Oct 16, 2024Ravie LakshmananEndpoint Security / Malware Threat actors are attempting to abuse the open-source EDRSilencer tool as part of efforts to tamper endpoint detection and response (EDR) solutions and hide malicious activity. Trend Micro said it detected “threat actors…

The US Cybersecurity and Infrastructure Security Agency (CISA) has published the third edition of Framing Software Component Transparency, a key document aimed at improving the clarity and usage of the Software Bill of Materials (SBOM). This latest version, developed by…

Oct 16, 2024Ravie LakshmananData Privacy / Passwordless The FIDO Alliance said it’s working to make passkeys and other credentials more easier to export across different providers and improve credential provider interoperability, as more than 12 billion online accounts become accessible…

Cyber-threats are escalating beyond the collective ability to defend against them, new UK National Cyber Security Centre (NCSC) head Dr Richard Horne has warned. In his first international speech at Singapore International Cyber Week, Horne said that increased dependence on…

Oct 16, 2024The Hacker NewsArtificial Intelligence / Cybercrime AI from the attacker’s perspective: See how cybercriminals are leveraging AI and exploiting its vulnerabilities to compromise systems, users, and even other AI applications Cybercriminals and AI: The Reality vs. Hype “AI…

Passkeys are rapidly gaining momentum and offer significant advantages over traditional passwords, with many security authorities and major tech companies like Apple, Google, and Microsoft promoting their use. Today, more than 12 billion online accounts can today be accessed with…

To defend your organization against cyber threats, you need a clear picture of the current threat landscape. This means constantly expanding your knowledge about new and ongoing threats. There are many techniques analysts can use to collect crucial cyber threat…