Collaborate Disseminate
A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the latest defenses on Intel and AMD cloud processors.
“We built a simple, $50 interposer that sits quietly in the … Continue reading $50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections
Government and telecommunications organizations across Africa, the Middle East, and Asia have emerged as the target of a previously undocumented China-aligned nation-state actor dubbed Phantom Taurus over the past two-and-a-half years.
“Phantom Taurus’… Continue reading Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware
Cybersecurity researchers have disclosed three now-patched security vulnerabilities impacting Google’s Gemini artificial intelligence (AI) assistant that, if successfully exploited, could have exposed users to major privacy risks and data theft.
“They … Continue reading Researchers Disclose Google Gemini AI Flaws Allowing Prompt Injection and Cloud Exploits
Microsoft on Tuesday unveiled the expansion of its Sentinel Security Incidents and Event Management solution (SIEM) as a unified agentic platform with the general availability of the Sentinel data lake.
In addition, the tech giant said it’s also releas… Continue reading Microsoft Expands Sentinel Into Agentic Security Platform With Unified Data Lake
The Problem: Legacy SOCs and Endless Alert Noise
Every SOC leader knows the feeling: hundreds of alerts pouring in, dashboards lighting up like a slot machine, analysts scrambling to keep pace. The harder they try to scale people or buy new tools, the … Continue reading Stop Alert Chaos: Context Is the Key to Effective Incident Response
A newly patched security flaw impacting Broadcom VMware Tools and VMware Aria Operations has been exploited in the wild as a zero-day since mid-October 2024 by a threat actor called UNC5174, according to NVISO Labs.
The vulnerability in question is CVE… Continue reading Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024
Cybersecurity researchers have flagged a previously undocumented Android banking trojan called Datzbro that can conduct device takeover (DTO) attacks and perform fraudulent transactions by preying on the elderly.
Dutch mobile security company ThreatFab… Continue reading New Android Trojan “Datzbro” Tricking Elderly with AI-Generated Facebook Travel Events
The world of enterprise technology is undergoing a dramatic shift. Gen-AI adoption is accelerating at an unprecedented pace, and SaaS vendors are embedding powerful LLMs directly into their platforms. Organizations are embracing AI-powered applications… Continue reading Evolving Enterprise Defense to Secure the Modern AI Supply Chain
A Chinese national has been convicted for her role in a fraudulent cryptocurrency scheme after law enforcement authorities in the U.K. confiscated £5.5 billion (about $7.39 billion) during a raid of her home in London.
The cryptocurrency seizure, amoun… Continue reading U.K. Police Just Seized £5.5 Billion in Bitcoin — The World’s Largest Crypto Bust
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting the Sudo command-line utility for Linux and Unix-like operating systems to its Known Exploited Vulnerabilities (KEV) catalog, citing evi… Continue reading CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems