Tags → #cybersecurity

Research Highlights Vulnerabilities in Large Language Models Security

A new paper examines the vulnerabilities of large language models in enterprise settings, emphasizing the need for a comprehensive understanding of security risks across software and hardware components in compound AI systems.
Rise in Cyber Attacks Using Stolen Credentials Reported

Cyber threat actors are increasingly using stolen credentials as a primary method for breaching systems, highlighting the growing challenge of identity-based attacks for organizations.
Study Identifies Vulnerabilities in LLM-Integrated Frameworks

A recent study introduced LLMSmith, a tool designed to detect and exploit Remote Code Execution vulnerabilities in Large Language Model-integrated frameworks and applications, highlighting significant security concerns in this area.
Surge in DDoS Attacks Reported by Cloudflare in 2024

DDoS attacks have significantly increased in prevalence and scale over the past decade, posing a major threat to online services by overwhelming them with requests.
VPN Vulnerabilities Highlighted in Recent Security Research

Research indicates that over half of enterprises have faced attacks exploiting vulnerabilities in popular VPN clients, particularly highlighting security concerns with Fortinet's VPN solution.
Vulnerability Discovered in Drugs.com Authentication System

A recently identified vulnerability in the Drugs.com vulnerability disclosure program has raised concerns about the security risks associated with inadequate authentication logic, particularly the ability to bypass multi-factor authentication.
BARK Tool Assists Research on Azure Key Vault Operations

BARK is a tool designed to assist in research related to adversarial tradecraft involving Azure Key Vault, offering various functions for token acquisition, key vault management, and data encryption and decryption.
Concerns Rise Over New NFC Fraud Tactic "Ghost Tap"

Financial institutions are increasingly alarmed by the emergence of a cash-out tactic known as "Ghost Tap," which utilizes NFC technology to facilitate fraudulent transactions without physical presence at the point of sale.
CrowdStrike Executive to Testify on Cyber Threats from China

Adam Meyers of CrowdStrike is set to testify before the U.S. Senate Judiciary Subcommittee on November 19, 2024, regarding the cyber threats posed by the state-sponsored actor LIMINAL PANDA, which has been active since at least 2020 and primarily targets telecommunications entities.
Cybersecurity Training Tool SCORPION Introduced for Education

The SCORPION platform, an innovative Cyber Range, aims to enhance cybersecurity training through automated scenario creation and adaptive learning modules, addressing the growing need for effective security measures amid rising cyberattacks.