Collaborate Disseminate
Multiple South Korean organizations across industries have been targeted in a recent Lazarus campaign dubbed Operation SyncHole.
The post South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days appeared first on SecurityWeek.
Continue reading South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days
Silent Push reveals a complex scheme where North Korean hackers posed as crypto companies, using AI and fake… Continue reading North Korean Hackers Use Fake Crypto Firms in Job Malware Scam
Hundreds of companies are showcasing their products and services next week at the 2025 edition of the RSA Conference in San Francisco.
The post RSA Conference 2025 – Pre-Event Announcements Summary (Part 2) appeared first on SecurityWeek.
Continue reading RSA Conference 2025 – Pre-Event Announcements Summary (Part 2)
Threat actors are likely exploiting a new vulnerability in SAP NetWeaver to upload JSP web shells with the goal of facilitating unauthorized file uploads and code execution.
“The exploitation is likely tied to either a previously disclosed vulner… Continue reading SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers
When we talk about identity in cybersecurity, most people think of usernames, passwords, and the occasional MFA prompt. But lurking beneath the surface is a growing threat that does not involve human credentials at all, as we witness the exponential gr… Continue reading Why NHIs Are Security’s Most Dangerous Blind Spot
Kaspersky expert has discovered a new version of the Triada Trojan, with custom modules for Telegram, WhatsApp, TikTok, and other apps. Continue reading Triada strikes back
New Intel CEO Lip-Bu Tan has mandated that employees return to the office four days a week starting September 1 to boost collaboration and decision-making. Tan also signaled upcoming job cuts and organizational changes, including a flatter management s… Continue reading Intel Says Employees Must Return To the Office 4 Days a Week
A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications.
The post SAP Zero-Day Possibly Exploited by Initial Access Broker appeared first on SecurityWeek.
Continue reading SAP Zero-Day Possibly Exploited by Initial Access Broker
A new attack technique named Policy Puppetry can break the protections of major gen-AI models to produce harmful outputs.
The post All Major Gen-AI Models Vulnerable to ‘Policy Puppetry’ Prompt Injection Attack appeared first on SecurityWeek.
Continue reading All Major Gen-AI Models Vulnerable to ‘Policy Puppetry’ Prompt Injection Attack
Mobile network operator SK Telecom, which serves approximately 34 million subscribers in South Korea, has confirmed that it suffered a cyber attack earlier this month that saw malware infiltrate its internal systems, and access data related to customer… Continue reading Hackers access sensitive SIM card data at South Korea’s largest telecoms company