Tags → #cybersecurity

Threats
ESET Identifies Linux Backdoor Linked to Gelsemium APT Group
Nov 21, 2024 ESET researchers have identified multiple samples of a Linux backdoor named WolfsBane, attributed to the Gelsemium APT group, marking the first public report of their use of Linux malware.
Tools
Foray Framework Enhances Security for DeFi Applications
Nov 21, 2024 Foray is a newly developed attack synthesis framework aimed at improving the security of Decentralized Finance applications by effectively identifying vulnerabilities in smart contracts.
Threats
Malicious Update Detected in Python Package "aiocpa"
Nov 21, 2024 On November 20, 2024, Phylum's automated risk detection platform identified a malicious update in the "aiocpa" package on PyPI, which was designed to steal private keys through obfuscated code.
Threats
Phishing Campaign Targets Telecommunications and Financial Sectors
Nov 21, 2024 In late October 2024, analysts at EclecticIQ identified a sophisticated phishing campaign targeting the telecommunications and financial sectors, utilizing Google Docs to deliver links that redirected victims to counterfeit login pages hosted on Weebly.
Vulnerabilities
Research Highlights Vulnerabilities in Large Language Models Security
Nov 21, 2024 A new paper examines the vulnerabilities of large language models in enterprise settings, emphasizing the need for a comprehensive understanding of security risks across software and hardware components in compound AI systems.
Threats
Rise in Cyber Attacks Using Stolen Credentials Reported
Nov 21, 2024 Cyber threat actors are increasingly using stolen credentials as a primary method for breaching systems, highlighting the growing challenge of identity-based attacks for organizations.
Vulnerabilities
Study Identifies Vulnerabilities in LLM-Integrated Frameworks
Nov 21, 2024 A recent study introduced LLMSmith, a tool designed to detect and exploit Remote Code Execution vulnerabilities in Large Language Model-integrated frameworks and applications, highlighting significant security concerns in this area.
Threats
Surge in DDoS Attacks Reported by Cloudflare in 2024
Nov 21, 2024 DDoS attacks have significantly increased in prevalence and scale over the past decade, posing a major threat to online services by overwhelming them with requests.
Vulnerabilities
VPN Vulnerabilities Highlighted in Recent Security Research
Nov 21, 2024 Research indicates that over half of enterprises have faced attacks exploiting vulnerabilities in popular VPN clients, particularly highlighting security concerns with Fortinet's VPN solution.
Vulnerabilities
Vulnerability Discovered in Drugs.com Authentication System
Nov 21, 2024 A recently identified vulnerability in the Drugs.com vulnerability disclosure program has raised concerns about the security risks associated with inadequate authentication logic, particularly the ability to bypass multi-factor authentication.