Tags → #stories

Vulnerabilities
Advancements in LLM Agents for Software Vulnerability Repair
Nov 22, 2024 Recent advancements in software security have highlighted the use of fuzz testing and Large Language Model agents, such as AutoCodeRover, to identify and autonomously fix vulnerabilities in open source software systems.
Tools
AI Integration in DevSecOps Enhances Software Security Management
Nov 22, 2024 The integration of artificial intelligence into DevSecOps is reshaping security management in software development by enhancing threat detection and automating compliance processes.
Threats
Analysis of Malware Obfuscation Techniques and Python Script
Nov 22, 2024 Xavier Mertens' article examines the obfuscation techniques used by malware developers, focusing on a malicious Python script that targets mnemonic phrases related to cryptocurrency wallets.
Threats
APT-K-47 Group Linked to Sophisticated Cyber Attack Campaign
Nov 22, 2024 The Knownsec 404 Advanced Threat Intelligence team has reported a sophisticated attack campaign attributed to the APT-K-47 organization, which utilizes social engineering tactics related to "Hajj" to compromise systems.
Vulnerabilities
CISA Conducts Cyber Attack Simulation on Critical Organization
Nov 22, 2024 The US Cybersecurity and Infrastructure Agency (CISA) conducted a three-month simulated cyber attack exercise on a critical organization's networks to identify vulnerabilities and enhance security measures.
Breaches
Cyberattack by GruesomeLarch Targets Organizations Linked to Ukraine
Nov 22, 2024 In February 2022, cybersecurity firm Volexity uncovered a cyberattack by the Russian APT group GruesomeLarch, which exploited nearby Wi-Fi networks to gain access to organizations involved in Ukrainian projects.
Threats
Earth Kasha Malware Attacks Target Japan, Taiwan, and India
Nov 22, 2024 Earth Kasha, a cyber threat actor, has been linked to a series of sophisticated malware attacks targeting organizations in Japan, Taiwan, and India, utilizing advanced techniques and evolving malware such as LODEINFO and NOOPDOOR.
Education
Injection Techniques in Computing Environments: A Tutorial
Nov 22, 2024 The article provides a detailed tutorial on using the `ptrace` system call for process injection in Linux, highlighting its functionalities and ethical considerations.
Vulnerabilities
Investigation Reveals SSTI Vulnerabilities in FreeMarker Engine
Nov 22, 2024 Sayaan Alam, a member of the Synack Red Team, has investigated Server-Side Template Injection vulnerabilities in the FreeMarker template engine, revealing potential security risks associated with user input rendering in Java applications.
Threats
Lateral Movement Techniques in macOS: An Overview
Nov 22, 2024 The article provides an overview of lateral movement techniques in macOS, detailing methods such as SSH key theft, Apple Remote Desktop, and Remote Apple Events, while emphasizing the importance of security measures to protect against these cyber threats.