🐛 COMMON VULNERABILITIES AND EXPOSURES 1[−]
30 DecKaspersky unknown hardware 'feature' used in iPhone attackssubmitted by c0mmando to netsec 1 points | 1 comments https://www.theregister.com/2023/12/28/kaspersky_reveals_previously_unknown_hardware/ Kaspersky’s Global Research and Analysis Team (GReAT) has exposed a previously unknown “feature” in Apple iPhones that allowed malware to by…THEREGISTER.COM
⚠️ VULNERABILITY DISCLOSURE 3[−]
30 DecNew Black Basta decryptor exploits ransomware flaw to recover filesResearchers have created a decryptor that exploits a flaw in Black Basta ransomware, allowing victims to recover their files for free. [...]BLEEPINGCOMPUTER.COM
30 DecWeekly Update 380Presently sponsored by: Unpatched devices keeping you up at night? Kolide can get your entire fleet updated in days. It's Device Trust for Okta. Watch the demo! We're in Paris! And feeling proper relaxed after several days of wine and cheese too, I might add. This was a very…TROYHUNT.COM
30 DecNew malware found in analysis of Russian hacks on Ukraine, Polandsubmitted by c0mmando to netsec 1 points | 0 comments https://therecord.media/fancy-bear-apt28-ukraine-new-malware-masepie Researchers have discovered a new cyber operation against Ukrainian and Polish organizations, attributing it to the Russian state-controlled hacker group kno…THERECORD.MEDIA
🔥 INCIDENT REPORTING 3[−]
30 DecIt’s not all doom and gloom: When cybersecurity gave us hope in 2023A funny — but true — joke at TechCrunch is that the security desk might as well be called the Department of Bad News, since, well, have you seen what we’ve covered of late? There is a never-ending supply of devastating breaches, pervasive surveillance and dodgy startups flo…TECHCRUNCH.COM
30 Dec2023 showed cybersecurity isn’t immune from brutal layoffsDespite a rise in cyberattacks and breaches, the cybersecurity industry is by no means exempt from the uncertainty inspired by the current economy. 2023 will likely be remembered as the “year of the layoff.” While many expected the tide to shift after a rough 2022 tha…TECHCRUNCH.COM
30 DecResearchers use AI chatbots against themselves to 'jailbreak' each otherFascinating article at TechXplore, December 28, 2023. Computer scientists from Nanyang Technological University, Singapore (NTU Singapore) have managed to compromise multiple artificial intelligence (AI) chatbots, including ChatGPT, Google Bard and Microsoft Bing Chat, to …KNOWBE4.COM
🕵️ THREAT INTELLIGENCE 4[−]
30 DecKimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest AttacksThe North Korean Kimsuky APT has recently been observed using a new variant called AlphaSeed, written in Golang, which uses chromedp for communication with the command-and-control server.THEHACKERNEWS.COM
30 DecThe 37th Chaos Communication Congress (37C3) - 100+ talkssubmitted by ashar to security_cpe 2 points | 0 comments https://infosec.pub/pictrs/image/b2b047ff-a0c0-4b52-b768-519a74cad969.png Full playlist The 37th Chaos Communication Congress (37C3) takes place in Hamburg, 27.-30.12.2023, and is the 2023 edition of the annual four-day con…INFOSEC.PUB
30 Dec2024 Weaponized AI Arms Race: Impacts and Ethical Stakessubmitted by MOMA_Trance to securitynews 1 points | 0 comments https://www.ultra-unlimited.com/blog/2024-weaponized-ai-arms-raceULTRA-UNLIMITED.COM
30 DecGoogle Settles $5 Billion Privacy Lawsuit Over Tracking People Using ‘Incognito Mode’Google agreed to settle a $5 billion privacy lawsuit claiming that it continued spying on people who used the “incognito” mode in its Chrome browser. The post Google Settles $5 Billion Privacy Lawsuit Over Tracking People Using ‘Incognito Mode’ appeared first on SecurityWeek .SECURITYWEEK.COM
🌐 CYBER THREAT LANDSCAPE 1[−]
30 DecInfo-Stealing Malware Now Includes Google Session HijackingMultiple malware-as-a-service info stealers now have the ability to manipulate authentication tokens to gain persistent access to a victim's Google account, even after the user has reset their password.HEALTHCAREINFOSECURITY.COM
📡 INFOSEC NEWS 1[−]
30 DecBeware: Scam-as-a-Service Aiding Cybercriminals in Crypto Wallet-Draining AttacksCybersecurity researchers are warning about an increase in phishing attacks that are capable of draining cryptocurrency wallets. "These threats are unique in their approach, targeting a wide range of blockchain networks, from Ethereum and Binance Smart Chain to Polygon, Avalanche…THEHACKERNEWS.COM