Tags → #cybersecurity

Infostealers Pose Growing Cybersecurity Threat in 2023

In 2023, infostealers have become a major cybersecurity threat, compromising nearly 2 billion records and affecting over 500 million devices globally.
Insights for Beginners in Cybersecurity Careers

A final-year engineering student has written an article providing insights for beginners interested in pursuing a career in cybersecurity, outlining various specializations and recommended learning resources.
New Method for DLL Injection via Return-Oriented Programming

A new method for thread hijacking using Return-Oriented Programming (ROP) allows for the injection of a Dynamic Link Library (DLL) into a remote thread, marking a shift from traditional executable memory techniques.
New Stealth Malware Variant Targets Red Hat Systems

A report from Qianxin's X Lab has revealed a new variant of stealth malware targeting Red Hat 7.9 systems, which exhibits advanced evasion tactics and has been detected by Sandfly, a cybersecurity company.
Phishing Campaign Targets E-Commerce Shoppers During Black Friday

Analysts from EclecticIQ have identified a phishing campaign targeting e-commerce shoppers in Europe and the USA, believed to be orchestrated by a financially motivated threat actor known as SilkSpecter, which coincided with the Black Friday shopping season.
Rise in Server-Side Script Attacks and Detection Methods

The adoption of cloud technologies is increasing among businesses, leading to a rise in server-side script attacks that pose significant security challenges.
River Machine Walkthrough on Attack The Box Platform

The River machine on the Attack The Box platform is designed for junior penetration testers and includes a walkthrough that covers various stages of penetration testing, ultimately leading to successful access to the target machine.
Security Vulnerability Discovered in Target Website's Email System

A security vulnerability involving HTML injection has been identified in the email system of a self-hosted website, potentially exposing users to malicious links through confirmation emails.
Security Vulnerability Discovered in TL-WR841N Router

A recent analysis has revealed a command injection vulnerability in early versions of the TL-WR841N router, allowing authenticated attackers to execute arbitrary commands through its diagnostics webpage.
Study Examines Environmental Impact of AI and Energy Use

A study from the Polytechnic of Porto explores the environmental impact of Artificial Intelligence, focusing on energy consumption and carbon footprint while introducing the concept of "Green AI" to promote sustainable AI practices.