Tag: attackers

  • Hacker News: Kaspersky exposes hidden malware on GitHub stealing personal data

    Source URL: https://www.kaspersky.com/about/press-releases/kaspersky-exposes-hidden-malware-on-github-stealing-personal-data-and-485000-in-bitcoin Source: Hacker News Title: Kaspersky exposes hidden malware on GitHub stealing personal data Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the discovery of a malicious campaign dubbed GitVenom by Kaspersky’s Global Research & Analysis Team, targeting gamers and crypto investors through compromised open-source repositories on GitHub. It…

  • Hacker News: The GitVenom campaign: cryptocurrency theft using GitHub

    Source URL: https://securelist.com/gitvenom-campaign/115694/ Source: Hacker News Title: The GitVenom campaign: cryptocurrency theft using GitHub Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the GitVenom campaign, which involves threat actors creating fake open-source projects on GitHub to distribute malicious code. These projects appear legitimate and lure unsuspecting users, emphasizing the need for…

  • Hacker News: Certificate Transparency in Firefox: A Big Step for Web Security

    Source URL: https://blog.transparency.dev/ct-in-firefox Source: Hacker News Title: Certificate Transparency in Firefox: A Big Step for Web Security Feedly Summary: Comments AI Summary and Description: Yes Summary: The implementation of Certificate Transparency (CT) enforcement in Firefox marks a significant advancement in web security, enhancing protection against certificate fraud and man-in-the-middle attacks. This change demands compliance from…

  • Slashdot: Serbian Student’s Android Phone Compromised By Exploit From Cellebrite

    Source URL: https://it.slashdot.org/story/25/03/01/019202/serbian-students-android-phone-compromised-by-exploit-from-cellebrite?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Serbian Student’s Android Phone Compromised By Exploit From Cellebrite Feedly Summary: AI Summary and Description: Yes Summary: The report illustrates a concerning case of a zero-day exploit utilized by a surveillance vendor against a student critic of the Serbian government, highlighting the ongoing threats to information security in civil…

  • The Register: Ransomware criminals love CISA’s KEV list – and that’s a bug, not a feature

    Source URL: https://www.theregister.com/2025/02/28/cisa_kev_list_ransomware/ Source: The Register Title: Ransomware criminals love CISA’s KEV list – and that’s a bug, not a feature Feedly Summary: 1 in 3 entries are used to extort civilians, says new paper Fresh research suggests attackers are actively monitoring databases of vulnerabilities that are known to be useful in carrying out ransomware…

  • Slashdot: Apple’s Find My Network Exploit Lets Hackers Silently Track Any Bluetooth Device

    Source URL: https://yro.slashdot.org/story/25/02/28/013227/apples-find-my-network-exploit-lets-hackers-silently-track-any-bluetooth-device?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Apple’s Find My Network Exploit Lets Hackers Silently Track Any Bluetooth Device Feedly Summary: AI Summary and Description: Yes Summary: Researchers have uncovered a critical vulnerability in Apple’s Find My network that allows attackers to secretly track Bluetooth devices, mimicking AirTag’s functionality. This exploit, termed “nRootTag,” boasts a 90%…

  • CSA: How is AI Strengthening Zero Trust?

    Source URL: https://cloudsecurityalliance.org/blog/2025/02/27/how-is-ai-strengthening-zero-trust Source: CSA Title: How is AI Strengthening Zero Trust? Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses the integration of AI within Zero Trust security frameworks, emphasizing the importance of automated responses, adaptive access controls, and anomaly detection to combat evolving cyber threats effectively. This synergy between AI and…

  • Unit 42: Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations

    Source URL: https://unit42.paloaltonetworks.com/?p=138415 Source: Unit 42 Title: Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations Feedly Summary: We analyze the backdoor Squidoor, used by a suspected Chinese threat actor to steal sensitive information. This multi-platform backdoor is built for stealth. The post Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations appeared first on…

  • The Register: With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare

    Source URL: https://www.theregister.com/2025/02/26/hibp_adds_giant_infostealer_trove/ Source: The Register Title: With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare Feedly Summary: 244M purloined passwords added to Have I Been Pwned thanks to govt tip-off A tip-off from a government agency has resulted in 284 million unique email addresses and plenty of passwords snarfed by…