Category Security

Cisco Counterfeiter Pleads Guilty to $100m Scheme

A Florida man has pleaded guilty to making more than $100 million importing and selling counterfeit Cisco network devices. Miami resident Onur Aksoy, 39, pleaded guilty to conspiring with others to sell counterfeit goods, mail fraud, wire fraud and mail…

CVEs Surge By 25% in 2022 to Another Record High

According to data compiled by Skybox Security, the number of new vulnerabilities reported by the US government in 2022 will increase by a quarter each year to 25,096, a new record high. Security vendors analyze the National Vulnerability Database (NVD)…

New PowerDrop Malware Targeting U.S. Aerospace Industry

June 7, 2023Ravi LakshmananMalware/Cyberattack An unknown attacker has been observed targeting the US aerospace industry with a new PowerShell-based malware called . power drop. According to Adlumin, who found the malware embedded in an anonymous domestic aerospace defense contractor in…

Clop Ransom Gang Breaches Big Names Via MOVEit Flaw

A growing number of global businesses appear to be affected by a recently discovered zero-day vulnerability in popular file transfer software, exploited by the Clop ransomware gang. The BBC, BA, Boots and the Nova Scotia government have also been affected…

Three Vulnerabilities Discovered in Game Dev Tool RenderDoc

Three critical vulnerabilities have been discovered in RenderDoc, a graphics debugger that supports multiple operating systems including Windows, Linux, Android and Nintendo Switch. The software seamlessly integrates with leading game software engines such as Unity and Unreal, making it a…

5 Reasons Why IT Security Tools Don’t Work For OT

As digital transformation and OT/IT convergence accelerate, attacks against critical infrastructure and other OT systems are on the rise. Water treatment plants, energy providers, factories, chemical plants, the infrastructure that supports our daily lives can all be at risk. Disruption…

New ChatGPT Attack Technique Spreads Malicious Packages

A new cyber-attack technique using the OpenAI language model ChatGPT has emerged, allowing attackers to spread malicious packages into developer environments. Vulcan Cyber’s Voyager18 research team described the findings in an advisory published today. “We have observed that ChatGPT generates…