Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for Deepfakes Gone Wild: ...

 Firewall Daily

In 2024, the lines between reality and illusion blur as deepfake trends reshape our perception. No longer confined to playful movie magic, this AI-powered tool has infiltrated our lives, weaving misinformation and sowing discord across industries. From manipulated crypto endorsements by Elon Musk to the disturbing   show more ...  

hyper-realization of celebrity deepfakes, the technology’s dark edge casts a long shadow. And with its market booming and resources readily available, the potential for malicious actors to weaponize deepfakes for personal gain raises urgent concerns. The question looms: can we harness the creative potential of this technology while safeguarding ourselves from its deceptive depths? In this article, we will delve deeper to uncover the answers and explore the 10 deepfake trends in 2024 that will shape the landscape. The Deceptive Realm of Deepfake Technology Deepfake technology, with its deceptive capabilities, necessitates a closer examination of the challenges confronting society. Understanding the gravity of deepfake technology is crucial to grasping its potential for deception. In essence, deepfake technology utilizes AI algorithms to craft hyper-realistic videos and audio recordings, skillfully manipulating facial expressions and voices. These manipulations have stirred concerns about the malicious exploitation of such content, prompting organizations and governments worldwide to advocate for heightened awareness and the implementation of policy measures. Sorab Ghaswalla, an AI communicator and advocate, aptly highlights the double-edged sword of deepfakes. In 2023, advancements like heightened realism and easier access to AI tools have blurred the lines between genuine and manipulated content. Ghaswalla, in a conversation with TCE, aptly remarked, “New and more powerful AI-powered software and other tools are now bringing the tech to even the layman, and this is being then used for creating synthetic content or deepfakes. While the democratization of tech is always welcome, and such synthetic content is all right if used for visual effects in films or other positive purposes, it also raises concerns of misuse by people with malicious intent.” Government’s Digital Move: Boosting Accountability In response to the escalating trends in deepfakes, the Indian government has taken decisive action by instructing social media platforms to promptly remove deepfake content within 36 hours of receiving a complaint. This move follows controversies involving public figures like Rashmika Mandanna and Katrina Kaif. Enforcing the stipulations laid out in India’s IT Rules of 2021, these platforms are mandated to take down offending content within 24 hours, a strategic measure aimed at combating the growing menace of deepfake misinformation. This proactive stance resonates on a global scale, with similar measures being adopted worldwide. The European Union mandates fact-checking networks, China requires explicit labeling, and the United States has implemented the Deepfake Task Force Act. In a recent Digital India dialogue session, Rajeev Chandrasekhar, Union Minister of State for Skill Development & Entrepreneurship and Electronics & IT, emphasized the imperative of fostering a safe and trusted internet environment. “All platforms and intermediaries have agreed that the current laws and rules, even as we discuss new laws and regulations, provide for them to deal with deepfakes conclusively. They have agreed that in the next seven days they will ensure all the terms and views and contracts with users will expressly forbid users from 11 types of content laid out in IT rules,” said Minister Chandrasekhar. In response to concerns raised by Indian Prime Minister Narendra Modi about deepfake threats, platforms and intermediaries have committed to aligning their community guidelines with IT rules, specifically targeting harmful content, including deepfakes. Platforms have pledged to enforce terms and contracts forbidding users from engaging in content violating IT rules within the next seven days. The Ministry of Electronics and Information Technology (MEITY) is set to appoint a ‘Rule 7’ officer to address violations, providing digital citizens with a platform to report intermediary misconduct. Minister Chandrasekhar acknowledges progress in grievance redressal mechanisms but highlights the ongoing challenges posed by deepfakes and misinformation. Collaborative efforts between the government and intermediaries are essential to addressing these issues and ensuring a safer online environment. Looking into the digital future, Ghaswalla also emphasizes the urgent need for collaboration between governments and agencies. “Tackling malicious deepfakes and fake news requires a two-pronged approach. The first is where governments, big tech, businesses, and nonprofits need to come together to address these challenges and alleviate the risks linked with deepfakes. The other is to launch viral educative programs/campaigns in public, the end users, about deepfakes, and educate them in spotting deepfakes and manipulated content,” he opined. Generative AI and Deepfake Statistics for 2024 As generative AI tools gain prominence, the relevance of deepfake-related statistics comes to the forefront. Focusing on key generative AI metrics such as adoption rates, financial implications, and associated risks underscores the rapid evolution of deepfake technology and its use of generative AI. CSOonline identifies deepfakes as a top security threat, particularly as the 2024 U.S. election cycle approaches. Cloudflare CSO Grant Bourzikas emphasizes the increasing realism of today’s deepfakes, presenting challenges for identification. Addressing concerns about malicious use cases, industry leaders emphasize the importance of demystifying AI and implementing robust security measures. On the other end of the spectrum, particularly in the cybersecurity domain, threat actors have begun employing deepfakes for malicious operations. Instances of hackers and ransomware groups using audio and video deepfakes to scam individuals and organizations for financial gain have already surfaced. Ghaswalla, in a conversation with TCE, highlights the necessity for robust detection and countermeasures to address the rising threats of deepfakes. He notes that advancements in AI-powered detection tools and forensic analysis techniques make this possible. Given the constant evolution of deepfake technology, cybersecurity strategies must adapt swiftly to keep pace. 10 Deepfake Trends Reshaping 2024 2024 promises a surge in deepfake trends, reshaping societies and amplifying the misinformation challenge. Fueled by a burgeoning global market, these 10 key trends – from market dynamics to ethical dilemmas – present both opportunities and threats, demanding closer scrutiny and proactive solutions. 1. The Market Dynamics The market dynamics are underlined by the global deepfake software market’s impressive growth, reaching a valuation of US$54.32 million in 2022 and is anticipated to reach US$348.9 million by 2028, demonstrating a notable CAGR during the period from 2022 to 2028. A comprehensive deepfake software market report encapsulates crucial data on market introduction, segmentation, status, trends, opportunities, challenges, competitive analysis, company profiles, and trade statistics. Offering an in-depth analysis of types, applications, players, major regions, and subdivisions of countries, this report ensures tailored insights for stakeholders. 2. Deepfake Software Market Growth and Government Intervention The surge in demand for applications across PC and mobile platforms is an important factor propelling the growth of the deepfake software market globally. The market space, categorized into deepfake creation and deepfake detection, witnessed notable shares for these segments in 2023. This could also mean the aggressive use of deepfake for spreading misinformation. In response to the deepfake threat, governments and regulatory bodies are likely to enact new laws and regulations. Legal frameworks may emerge to hold individuals or entities accountable for creating and disseminating malicious deepfake content. This regulatory approach seeks to address the potential societal and political risks associated with the misuse of deepfakes, offering a means to curb their negative impact and establishing consequences for those who engage in deceptive practices. 3. Improved Realism and Quality Advances in deepfake technology promise heightened realism and quality in manipulated videos. Evolving algorithms and increased computational power contribute to more convincing facial expressions, gestures, and overall visual coherence. The potential consequences extend to challenges in discerning between authentic and fake content, necessitating continuous development in countermeasures and detection technologies to safeguard against the deceptive nature of these sophisticated manipulations, which could impact areas ranging from public trust to legal considerations as the technology evolves. Beyond malicious use, deepfake technology holds potential commercial applications. The entertainment industry may leverage it for realistic special effects, while marketers explore personalized advertising through the creation of engaging and tailored content. This dual application raises both creative and ethical considerations, prompting a delicate balance between innovation and responsible usage to ensure the technology’s positive contributions without compromising ethical standards and societal well-being. 4. Pandemic and Strategic Developments The COVID-19 pandemic has left an indelible impact on the deepfake software market. A comprehensive analysis is required to assess the pandemic’s direct and indirect effects on the international and local scales. The use of such a convincing technology can create chaos for the modern world, especially in times when quarantine and self-isolation have become a huge part of society. According to NCC Group, many companies prioritize business continuity, normalizing unusual practices. Remote work prompts quick, short-notice purchases, potentially relaxing financial due diligence. This shift in working dynamics creates opportunities for cyber threats. Deepfake usage, seen before COVID-19, increases, exploiting CEOs’ voices for fraudulent emails. Additionally, the use of deepfake technology has also increased in the ongoing war between nations, especially, Russia-Ukraine and Israel-Palestine. 5. Audio Deepfakes Deepfakes pose a significant threat to various industries in 2024. As AI technology advances, the distinction between real and fake becomes increasingly challenging for the average person. Incidents such as a man in China falling victim to a deepfake scam emphasize the urgency to address this issue. Audio deepfakes are another part of the technology that is progressing heavily on the internet. If it gets into the wrong hands, it presents a growing risk to the reliability of voice-based authentication systems and the integrity of audio evidence. The increasing ability to manipulate voices with precision raises concerns about the potential misuse of this technology in creating deceptive audio recordings, contributing to a broader scale of trust issues in communication and potentially impacting legal and security realms where audio evidence is crucial. 6. Political Manipulation The rise of deepfakes for political manipulation is a troubling trend. Public figures may be targeted and manipulate content strategically deployed to spread misinformation, influence elections, or shape public opinion during critical events. The potential consequences include erosion of public trust, compromised political processes, and challenges in discerning genuine information from manipulated content, necessitating a multi-faceted approach involving technological, legal, and educational interventions to mitigate the impact on democratic processes. In a similar instance, political experts at the University of Virginia warn of the threat posed by computer-generated deepfake videos in election campaigns. The Federal Election Commission is considering a proposal to address this concern. Deepfakes, using AI to manipulate voices and appearances, could be used for voter manipulation, with the potential for widespread misinformation and harm to democracy. 7. Evolution of Deepfake Technology Deepfake technology has evolved significantly over the years. Initially emerging in a Reddit forum for face-swapping in explicit content, it has now grown into a mainstream threat. The development of generative adversarial networks (GANs) in 2014 marked a breakthrough, leading to the creation of popular deepfake tools like FaceSwap and DeepFaceLab. The evolving nature of deepfake technology prompts a parallel development of detection tools. Advanced AI algorithms and machine learning models strive to identify subtle cues and anomalies in videos, audio recordings, or other media. These tools are crucial for maintaining the integrity of digital content, providing a defense against the potential harm caused by the malicious use of deepfakes, and offering a means to restore confidence in the authenticity of digital media. 8. Detection and Mitigation Detecting deepfakes remains a challenge due to the computational intensity involved in creating them. Although algorithms exist for detection, none are 100% accurate. Microsoft and other entities have rolled out detection tools, but the race between deepfake technology and detection tools continues. With the growing prevalence of deepfakes, there is a pressing need to intensify efforts to educate the public. Awareness campaigns, educational programs, and accessible tools are essential to help individuals discern between real and manipulated content. This proactive approach empowers users to mitigate the risk that comes with the use of deepfake videos. 9. Voice Cloning and Deepfake go Hand-in-hand The Deepfake and Voice Clone Consumer Sentiment Report for October 2023 sheds light on public perceptions of deepfake and voice cloning. Over 90% of respondents express concern about generative AI technology. Concerns vary across industries, income levels, and platforms, with social media being a primary channel for deepfake exposure. With such a large network the aggressive use of deepakes prompts ethical considerations regarding its development and use. Conversations around responsible practices, potential consequences, and the ethical guidelines governing the creation and dissemination of deepfakes become paramount. Establishing ethical standards is essential to mitigate the potential harm caused by deepfakes, protecting individual privacy, reputation, and societal trust in the era of evolving digital manipulation. 10. Customizable Deepfakes Empowering users with increased control over deepfake creation introduces a new dimension to the ethical and societal implications of this technology. The ability to customize content based on specific characteristics, scenarios, or targeted individuals raises concerns about potential misuse. The proliferation of personalized content could have far-reaching consequences, necessitating a balance between creative expression and the prevention of harm to individuals or groups through the establishment of ethical guidelines and responsible usage practices. Conclusion The deepfake technology trends of 2023 presents a complex tapestry of technological advancements, ethical dilemmas, and societal challenges. As AI-powered manipulation becomes more sophisticated, governments worldwide are taking decisive actions to address the threats posed by deepfakes. The market dynamics indicate a surge in demand, raising concerns about the potential misuse of this technology. Detection and mitigation efforts are crucial, yet the mere nature of deepfake technology continues to challenge these measures. Striking a balance between innovation and responsible usage is imperative to harness the positive aspects of deepfake technology while safeguarding against its deceptive and malicious applications in shaping digital world of the future.

image for Unmasking New Year-t ...

 Dark Web News

As the New Year festivities unfold, cyber threats take on a deceptive facade, with malicious actors exploiting the celebratory spirit to spread malware through carefully disguised spam emails. In a recent report by Cyble Research and Intelligence Labs (CRIL), a multi-stage malware campaign linked to Remcos RAT raises   show more ...  

concerns about the potential infiltration of systems through New Year themed spam emails. (Source: Cyble) CRIL came across a ZIP archive file named “happy new year.zip” on VirusTotal, pointing towards a possible delivery mechanism through New Year themed spam emails. The ZIP attachment, seemingly harmless at first glance, conceals a shortcut file masquerading as a PNG image. Once executed, the shortcut file utilizes MSHTA and JavaScript to initiate a download, presenting the user with a deceptive “Happy New Year” image to divert attention. New Year themed Spam Emails and the Remcos RAT Connection Source: Cyble Digging deeper, CRIL uncovered a noteworthy detail – the IP address associated with this new year themed spam email campaign was previously linked to the notorious Remcos RAT. Known for its remote access and surveillance capabilities, Remcos RAT has become a favored tool among threat actors for orchestrating malicious campaigns. This particular campaign employs a sophisticated social engineering technique, capitalizing on global trends. Victims receive a phishing email, seemingly offering information on COVID-19 safety measures or New Year celebration deals. However, the attached PDF is a cleverly disguised REMCOS RAT dropper, accompanied by a VBS file for malware execution. The malware ensures persistence by adding a Startup registry key, ensuring it remains active even after a system restart. The Remcos RAT, upon infiltration, demonstrates concerning activities such as evading antivirus detection, establishing persistence on the target system, operating as a legitimate process within Windows processes, acquiring admin privileges, and disabling user account control (UAC). Its capabilities encompass data theft, execution of backdoor commands, and the potential for compromising both system security and user privacy. Understanding the Remcos RAT Infection Chain Source: Cyble The infection chain unfolds with a deceptive lure image in a spam email, leading to the execution of a multi-stage process involving ZIP, LNK, HTA, and DLL sideloading. The user is misled into believing they are merely opening a harmless image file while, in reality, a malicious payload is silently downloaded and executed in the background. The technical analysis reveals the intricacies of the malware’s execution, from the initial ZIP archive to the final connection with the Command and Control (C&C) server. The disguised PNG file, the HTA file, and the subsequent DLL sideloading all contribute to the malware’s stealthy progression. Since the New Year brings a lot of celebration into our lives, the digital world is not immune to malicious actors exploiting celebratory themes for their nefarious deeds. Remcos RAT’s involvement in this New Year themed malware campaign highlights the evolving nature of dark web markets — especially associated with the sale and promotion of malware, trojans, RATs, and Ransomware as a Service (RaaS) products.  Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

 Malware and Vulnerabilities

A group known as Anonymous Arabic, with links to Turkey and Syria, is behind a sophisticated remote access Trojan called SilverRAT. They plan to release an updated version that can control compromised Windows systems and Android devices.

 Trends, Reports, Analysis

Extortionists are resorting to swatting as a new tactic to pressure hospitals into paying ransom demands. Swatting involves making false reports to the police, resulting in heavily armed officers showing up at victims' homes.

 Feed

The recent wave of cyber attacks targeting Albanian organizations involved the use of a wiper called No-Justice. The findings come from cybersecurity company ClearSky, which said the Windows-based malware "crashes the operating system in a way that it cannot be rebooted." The intrusions have been attributed to an Iranian "psychological operation group" called Homeland

 Feed

Telecommunication, media, internet service providers (ISPs), information technology (IT)-service providers, and Kurdish websites in the Netherlands have been targeted as part of a new cyber espionage campaign undertaken by a Türkiye-nexus threat actor known as Sea Turtle. "The infrastructure of the targets was susceptible to supply chain and island-hopping attacks, which the attack group

 Cyber Security News

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Source: World History Archive via Alamy Stock Photo A threat actor has sold for just $500 the source code and a cracked builder for Zeppelin, a Russian ransomware strain used in numerous attacks on US businesses and organizations in critical   show more ...  

infrastructure sectors in the past. The sale […] La entrada Fire Sale: Zeppelin Ransomware Source Code Sells for $500 on Dark Web – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Negligent'

Source: www.darkreading.com – Author: Nate Nelson, Contributing Writer Source: michelmond via Alamy Stock Photo Up against an onslaught of lawsuits, 23andMe is denying liability for millions of users’ genetic records leaked last fall. In a letter sent to a group of users suing the company obtained by   show more ...  

TechCrunch, lawyers representing the biotech company laid out […] La entrada 23andMe: ‘Negligent’ Users at Fault for Breach of 6.9M Records – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Tara Seals, Managing Editor, News, Dark Reading 1 Min Read Source: alimdi.net via Alamy Stock Photo The prolific North Korean state-backed threat actor known as TA444 is back with shiny new malware for targeting macOS users, dubbed “SpectralBlur.” The custom   show more ...  

tool is the latest in a string of proprietary malware that […] La entrada North Korea Debuts ‘SpectralBlur’ Malware Amid macOS Onslaught – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Robert Lemos, Contributing Writer GagoDesign via Shutterstock The group behind a sophisticated remote access Trojan, SilverRAT, has links to both Turkey and Syria and plans to release an updated version of the tool to allow control over compromised Windows systems and   show more ...  

Android devices. According to a threat analysis published on Jan. […] La entrada Syrian Threat Group Peddles Destructive SilverRAT – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 agents

Source: www.darkreading.com – Author: Dark Reading Staff Source: Peter Probst via Alamy Stock Photo The FBI is adding six new positions to American embassies in order to combat global cybercriminal issues, according to reports. The positions will be located in Brasilia, New Delhi, and Rome, bringing the total   show more ...  

number of cyber-related FBI agents in American […] La entrada Cyber-Focused FBI Agents Deploy to Embassies Globally – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Dark Reading Staff Source: Chroma Craft Media Group via Alamy Stock Photo Dubai-based AmiViz and US-based Internet of Things security vendor Asimily have teamed up to provide industrial Internet of Things (IoT) and medical device security offerings in the Middle East. The   show more ...  

announcement comes on the heels of Dubai’s second digital […] La entrada Dubai-US Deal Aims to Secure Medical, IoT Devices in the Middle East – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Can't

Source: www.darkreading.com – Author: Jared Atkinson Source: Allan Swart via Alamy Stock Photo COMMENTARY In 1931, scientist and philosopher Alfred Korzybski wrote, “The map is not the territory.” He meant that all models, like maps, leave out some information compared to reality. The models used to   show more ...  

detect threats in cybersecurity are similarly limited, so defenders […] La entrada Why Red Teams Can’t Answer Defenders’ Most Important Questions – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 acquires

Source: www.darkreading.com – Author: PRESS RELEASE DELRAY BEACH, Fla., Jan. 4, 2024 /PRNewswire-PRWeb/ — C3 Complete, an award-winning provider of technology, telecom, and information security services, today announced that it has acquired the Cyber Security business unit of Compliance Solutions Inc.   show more ...  

In addition to growing its existing Virtual Chief Information Security Officer (“vCISO”), penetration testing, and vulnerability assessment […] La entrada C3 Complete Acquires Information Security Business Unit of Compliance Solutions Inc. – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: PRESS RELEASE NEW YORK, Jan. 3, 2024 /PRNewswire/ — Driven Acquisition Inc, DBA Driven Technologies, a NY based leading cybersecurity and cloud service provider, today announced the acquisition of ieMentor, a Cisco Gold Partner with multiple advanced   show more ...  

specializations and a strong focus on security, networking, collaboration and data center solutions. The acquisition significantly elevates Driven Technologies’ […] La entrada Driven Technologies Expands Expertise With Acquisition of ieMentor – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: PRESS RELEASE FOXBOROUGH, Mass. , Jan. 3, 2024 /PRNewswire/ — Industrial Defender, the leading provider of OT asset data and cybersecurity solutions for industrial organizations, is excited to announce the launch of the Industrial Defender Risk Signal, its new   show more ...  

risk-based vulnerability management (RBVM) solution. Building upon the company’s robust vulnerability assessment capabilities, Industrial Defender Risk Signal […] La entrada Industrial Defender Risk Signal, a Risk-Based Vulnerability Management Solution for OT Security – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Lawrence Abrams With it being the first week of the New Year and some still away on vacation, it has been slow with ransomware news, attacks, and new information. However, last weekend, BleepingComputer tested a new decryptor for the Black Basta ransomware to show how   show more ...  

it could be used to decrypt […] La entrada The Week in Ransomware – January 5th 2024 – Secret decryptors – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Sergiu Gatlan The U.S. Department of Justice announced the end of a transnational investigation into the dark web xDedic cybercrime marketplace, charging 19 suspects for their involvement in running and using the market’s services. An international operation   show more ...  

involving law enforcement authorities from the United States, Belgium, Ukraine, Germany, and the Netherlands, with […] La entrada US charged 19 suspects linked to xDedic cybercrime marketplace – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Lawrence Abrams The administrator behind the notorious BreachForums hacking forum has been arrested again for breaking pretrial release conditions, including using an unmonitored computer and a VPN. The BreachForums admin, Conor Fitzpatrick, was arrested on March   show more ...  

15th, when he openly admitted without a lawyer present that he was a threat actor known as Pompompurin, […] La entrada BreachForums admin jailed again for using a VPN, unmonitored PC – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Bill Toulas Security researchers are detecting hundreds of IP addresses on a daily basis that scan or attempt to exploit Apache RocketMQ services vulnerable to a remote command execution flaw identified as CVE-2023-33246 and CVE-2023-37582. Both vulnerabilities have   show more ...  

a critical severity score and refer to an issue that remained active after the vendor’s initial […] La entrada Hackers target Apache RocketMQ servers vulnerable to RCE attacks – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Sergiu Gatlan The Twitter/X account of blockchain security firm CertiK was hijacked today to redirect the company’s more than 343,000 followers to a malicious website pushing a cryptocurrency wallet drainer. CertiK’s gold-verified X account was compromised   show more ...  

in a social engineering attack by a threat actor using another hacked account described by […] La entrada Web3 security firm CertiK’s X account hacked to push crypto drainer – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Bill Toulas The Memorial University of Newfoundland (MUN) continues to deal with the effects of a cyberattack that occurred in late December and postponed the start of classes in one campus. MUN is the largest public university in Atlantic Canada, with an academic and   show more ...  

administrative staff of 3,800, and over 19,000 students […] La entrada Memorial University recovers from cyberattack, delays semester start – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.govinfosecurity.com – Author: 1 Cybercrime , Fraud Management & Cybercrime , Government Authorities in 15 Countries Helped Dismantle Operations Following 2019 Takedown Cal Harrison • January 5, 2024     Authorities in 2019 posted this notice on the xDedic Marketplace after international law   show more ...  

enforcement agencies took it down. The U.S. Department of Justice announced […] La entrada DOJ Wraps xDedic Dark Web Market Case; 19 Charged Worldwide – Source: www.govinfosecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 acquires

Source: www.govinfosecurity.com – Author: 1 Anti-Phishing, DMARC , Fraud Management & Cybercrime , Governance & Risk Management Company Plans to Enhance Digital Workplace Protection With Behavioral Analytics Prajeet Nair (@prajeetspeaks) • January 5, 2024     Mimecast announced the acquisition of   show more ...  

human risk management solutions specialist Elevate Security as part of its initiative to enhance […] La entrada Mimecast Acquires Elevate Security to Address Human Risk – Source: www.govinfosecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.govinfosecurity.com – Author: 1 AI-Based Attacks , Artificial Intelligence & Machine Learning , Fraud Management & Cybercrime Data-Poisoning Attacks Are Critical Threat to Machine Learning Security, NIST Warns Akshaya Asokan (asokan_akshaya) • January 5, 2024     Image: Shutterstock   show more ...  

Machine learning systems are vulnerable to cyberattacks that could allow hackers to evade security and […] La entrada NIST Warns of Cyberthreats to AI Models – Source: www.govinfosecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.govinfosecurity.com – Author: 1 Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Government Reports Say Attempts to Delete Data in the Attacks Were Unsuccessful Mihir Bagwe (MihirBagwe) • January 5, 2024     Iranian hackers targeted the Albanian Parliament using the   show more ...  

No-Justice Wiper and other commonly used tools. The attack came months […] La entrada Iranian APT Used No-Justice Wiper in Recent Albanian Attacks – Source: www.govinfosecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.schneier.com – Author: Bruce Schneier Friday Squid Blogging—18th Anniversary Post: New Species of Pygmy Squid Discovered They’re Ryukyuan pygmy squid (Idiosepius kijimuna) and Hannan’s pygmy squid (Kodama jujutsu). The second one represents an entire new genus. As usual, you can also use this   show more ...  

squid post to talk about the security stories in the news […] La entrada Friday Squid Blogging—18th Anniversary Post: New Species of Pygmy Squid Discovered – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 academic papers

Source: www.schneier.com – Author: Bruce Schneier We don’t have a useful quantum computer yet, but we do have quantum algorithms. Shor’s algorithm has the potential to factor large numbers faster than otherwise possible, which—if the run times are actually feasible—could break both the RSA and   show more ...  

Diffie-Hellman public-key algorithms. Now, computer scientist Oded Regev has a […] La entrada Improving Shor’s Algorithm – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 backdoors

Source: www.schneier.com – Author: Bruce Schneier Kaspersky researchers are detailing “an attack that over four years backdoored dozens if not thousands of iPhones, many of which belonged to employees of Moscow-based security firm Kaspersky.” It’s a zero-click exploit that makes use of four iPhone   show more ...  

zero-days. The most intriguing new detail is the targeting of the […] La entrada New iPhone Exploit Uses Four Zero-Days – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 cyber

Source: thehackernews.com – Author: . Jan 06, 2024NewsroomCyber Espionage / Supply Chain Attack Telecommunication, media, internet service providers (ISPs), information technology (IT)-service providers, and Kurdish websites in the Netherlands have been targeted as part of a new cyber espionage campaign   show more ...  

undertaken by a Türkiye-nexus threat actor known as Sea Turtle. “The infrastructure of the targets […] La entrada Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Jan 06, 2024NewsroomMalware / Cyber Attack The recent wave of cyber attacks targeting Albanian organizations involved the use of a wiper called No-Justice. The findings come from cybersecurity company ClearSky, which said the Windows-based malware “crashes the   show more ...  

operating system in a way that it cannot be rebooted.” The intrusions have […] La entrada Pro-Iranian Hacker Group Targeting Albania with No-Justice Wiper Malware – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2024-01
Aggregator history
Saturday, January 06
MON
TUE
WED
THU
FRI
SAT
SUN
JanuaryFebruaryMarch