Barracuda
AI, AI, AI! Automation pushing ransomware attacks to new heights, says Barracuda
Barracuda says its security team has seen ransomware attacks double in the last 12 months, thanks in part to a rise in the use of AI-powered automation tools
News
Tough new SEC cyber risk disclosure rules have left kicking and screaming in their wake
The US Chamber of Commerce had fumed that the SEC’s “unprecedented micromanagement of companies’ cybersecurity programs is misguided"
Cybersecurity
"WormGPT" gives cybercriminals their own LLM
A dangerous Large Language Model trained on malware data sets is being used to launch BECs.
Cybersecurity
Malvertising: Threat actors are duping downloaders using... Google Ads and SEO
Threat actors are using SEO to trick users into downloading ransomware.
Azure
Microsoft admits “insecure pattern” in Azure AD exposed customers to risk of data loss, account takeover
"The risk is mainly with multi-tenant applications where this misconfiguration could result [in] account and privilege escalation" -- here's what you need to do.
vmware
VMware zero day used to hack defence, tech companies
The threat group has also used a wide range of attacker scripts to get vpxuser credentials, enumerate ESXi hosts and their guest VMs, and manipulate connected ESXi host firewall rules in order to steal data.
Cybersecurity
Barracuda tells customers to dump infected email security appliances after breach
Customers were first hit in October 2022. End user telemetry flagged something remiss this month... IOCs and Yara rules now shared.
Cybersecurity
Chinese state-backed “Volt Typhoon” hackers breached US critical infrastructure
The group is intent on developing capabilities and access that “could disrupt critical communications infrastructure between the United States and Asia region during future crises.” Threat vector Fortinet has questions to answer ...
open source
235.7 billion downloads; 2 staff on call. PyPI briefly shuts up shop amid burnout, malice
An uptick in malicious new projects being created on the Python Package Index (PyPI) repository forced it to shut down new user registrations over the weekend in a worrying sign for the open source project. PyPI is a repository of open-source Python packages supplied by the worldwide community of Python
Cybersecurity
China says chip firm Micron’s products “a major security risk”
Beijing claimed Sunday that it had found security issues in semiconductor firm Micron products that “pose a major security risk" to China
Cybersecurity
Why security pros are seething over Google’s new .zip domains
Google this week launched a new Top Level Domain of .zip and it has cybersecurity professionals worried. Here’s why. The way that modern browsers treat URLs – considering everything after @ as the host name, rather than the “user information” before it – means that it is easy to create a convincing
Cybersecurity
Chinese APT taps trojanised routers for mystery purposes
Horse Shell has a "penchant for complex structures" (and simple errors)