Collaborate Disseminate
A new report by cyber security firm Radware identifies the four main impacts of AI on the threat landscape emerging this year. Continue reading Prompt Hacking, Private GPTs, Zero-Day Exploits and Deepfakes: Report Reveals the Impact of AI on Cyber Security Landscape
The attack is just the latest in a string targeting the multilateral body in recent years.
The post ‘Large volume’ of data stolen from UN agency after ransomware attack appeared first on CyberScoop.
Continue reading ‘Large volume’ of data stolen from UN agency after ransomware attack
In the previous two HID articles, we talked about stealing HID descriptors, learned about a number of cool tools you can use for HID hacking on Linux, and created a …read more Continue reading Human-Interfacing Devices: HID over I2C
Keren Elazari is an internationally recognized security analyst, author, and researcher. Since 2000, Keren has worked with leading Israeli security firms, government organizations, innovative start-ups, and Fortune 500 companies. She is the founder of … Continue reading Thinking outside the code: How the hacker mindset drives innovation
The Cybersecurity and Infrastructure Security Agency is urging Sisense customers to reset credentials and report any suspicious activity.
The post Sisense breach exposes customers to potential supply chain attack appeared first on CyberScoop.
Continue reading Sisense breach exposes customers to potential supply chain attack
Last week, the Internet dodged a major nation-state attack that would have had catastrophic cybersecurity repercussions worldwide. It’s a catastrophe that didn’t happen, so it won’t get much attention—but it should. There’s an important moral to the story of the attack and its discovery: The security of the global Internet depends on countless obscure pieces of software written and maintained by even more obscure unpaid, distractible, and sometimes vulnerable volunteers. It’s an untenable situation, and one that is being exploited by malicious actors. Yet precious little is being done to remedy it…
The US Cyber Safety Review Board released a report on the summer 2023 hack of Microsoft Exchange by China. It was a serious attack by the Chinese government that accessed the emails of senior US government officials.
From the executive summary:
The Board finds that this intrusion was preventable and should never have occurred. The Board also concludes that Microsoft’s security culture was inadequate and requires an overhaul, particularly in light of the company’s centrality in the technology ecosystem and the level of trust customers place in the company to protect their data and operations. The Board reaches this conclusion based on:…
Continue reading US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack
An operation to undermine the software utility XZ Utils has exposed the fragile human foundations on which the modern internet is built.
The post Supply chain attack sends shockwaves through open-source community appeared first on CyberScoop.
Continue reading Supply chain attack sends shockwaves through open-source community
The Cyber Safety Review Board concluded in a report that Microsoft’s corporate culture has inappropriately deprioritized security.
The post Cyber review board blames cascading Microsoft failures for Chinese hack appeared first on CyberScoop.
Continue reading Cyber review board blames cascading Microsoft failures for Chinese hack
The cybersecurity world got really lucky last week. An intentionally placed backdoor in XZ Utils, an open-source compression utility, was pretty much accidentally discovered by a Microsoft engineer—weeks before it would have been incorporated into both Debian and Red Hat Linux. From ArsTehnica:
Malicious code added to XZ Utils versions 5.6.0 and 5.6.1 modified the way the software functions. The backdoor manipulated sshd, the executable file used to make remote SSH connections. Anyone in possession of a predetermined encryption key could stash any code of their choice in an SSH login certificate, upload it, and execute it on the backdoored device. No one has actually seen code uploaded, so it’s not known what code the attacker planned to run. In theory, the code could allow for just about anything, including stealing encryption keys or installing malware…