Category Security

July 15, 2023THNMoreArtificial Intelligence / Cyber ​​Crime Generative artificial intelligence (AI) is all the rage these days, so why is this technology being repurposed by malicious actors to their advantage, enabling an accelerated path to cybercrime? is probably not surprising.…

July 15, 2023THNMoreCyber ​​Attack / Enterprise Security Microsoft announced on Friday that a source code validation error allowed a malicious actor known as Storm-0558 to forge Azure Active Directory (Azure AD) tokens using a Microsoft Account (MSA) consumer signing key…

The UK financial services regulator has warned banks to closely monitor what steps they take to mitigate the growing risk of AI-powered fraud. Nikhil Rathi, CEO of the Financial Conduct Authority (FCA), said in a speech at the Financial Conduct…

Windows users are once again being targeted by sophisticated malware known as LokiBot, which spreads through malicious Office documents. According to a new advisory by Fortinet security researcher Cara Lin, attackers can use known vulnerabilities such as CVE-2021-40444 and CVE-2022-30190…

July 14, 2023THNMoreEmail security/vulnerability Zimbra has warned that its email software has a serious zero-day security flaw that is being exploited in the wild. “A security vulnerability has surfaced in Zimbra Collaboration Suite version 8.8.15 that may affect the confidentiality…

A federal grand jury indicts a former employee of a contractor who runs a sewage treatment plant in a town in California who may have remotely turned off a critical system, endangering public health and safety. bottom. Rambler Galler, 53,…

A new group of threat actors has been observed conducting a series of cyberattacks targeting government agencies, military entities, and civilian users in Ukraine and Poland. According to Cisco Talos’ new advisory, the malicious campaign began in April 2022 and…

July 14, 2023THNMoreCyber ​​Threat / Cloud Security Malicious actors have been implicated in a June 2023 cloud credential theft campaign focused on Azure and Google Cloud Platform (GCP) services, with the attackers targeting Amazon Web Services ( AWS) and beyond.…

WormGPT, a generative AI tool, has emerged as a powerful weapon in the hands of cybercriminals, especially for launching business email compromise (BEC) attacks, according to new findings shared by security firm SlashNext. “We are currently seeing a disturbing trend…

July 14, 2023THNMoreVulnerability/Cyber ​​Threat Multiple security vulnerabilities have been discovered in various services, such as the Honeywell Experion Distributed Control System (DCS) and QuickBlox, which, if successfully exploited, could result in a significant compromise of the affected system. Nine flaws…