Tags → #stories

Vulnerabilities
Survey Highlights Security and Privacy Risks of Large Language Models
Nov 19, 2024 A recent survey highlights significant security and privacy threats associated with large language models (LLMs), identifying vulnerabilities such as jailbreaking and data poisoning across various sectors.
Tools
Understanding Pivoting Techniques in Penetration Testing
Nov 19, 2024 Pivoting is a key technique in penetration testing that allows cybersecurity professionals to gain deeper access to internal systems within a network after initial compromise.
Vulnerabilities
AWS Addresses Vulnerability in CloudTrail Logging System
Nov 18, 2024 A recent cybersecurity development has identified a vulnerability in Amazon Web Services (AWS) that could enable undetectable data exfiltration from restricted accounts, prompting AWS to implement changes to enhance security and logging practices.
Threats
Bitdefender Reports Malicious Ad Campaigns Distributing Malware
Nov 18, 2024 Bitdefender Labs is monitoring malicious advertising campaigns that exploit online platforms to distribute malware, including a fraudulent Bitwarden browser extension promoted on Facebook.
Tools
Footprint-Based Biometric Identification Gains Recognition in Security
Nov 18, 2024 Human footprints are increasingly recognized for their potential in personal identification and crime scene investigations, offering a novel biometric method alongside traditional techniques.
Tools
iOS 18 Introduces Inactivity Reboot Feature for Security
Nov 18, 2024 iOS 18 has introduced an inactivity reboot feature that automatically restarts devices after 72 hours of inactivity to enhance user data security.
Education
Multi-Factor Authentication Importance for Small Businesses
Nov 18, 2024 A recent article highlights the importance of multi-factor authentication (MFA) in safeguarding small and medium businesses (SMBs) from account takeovers, noting that many users still rely on basic forms of MFA despite the heightened risks associated with inadequate security measures.
Policy
New Approach to Digital Identity Security Introduced
Nov 18, 2024 A recent paper by Eysa Lee and Anna Lysyanskaya from Brown University presents a new multi-holder anonymous credential scheme aimed at enhancing digital identity security in response to the eIDAS 2.0 regulation.
Tools
New Framework LMDetect Enhances Detection of APT Attacks
Nov 18, 2024 Researchers at Zhejiang University of Technology have developed LMDetect, a framework aimed at improving the detection of lateral movement in advanced persistent threat attacks by utilizing a graph-based analysis of host authentication log data.
Threats
New Infostealer Malware StrelaStealer Targets Email Credentials
Nov 18, 2024 StrelaStealer is a newly discovered infostealer malware that targets login credentials from popular email clients and is primarily distributed through malspam campaigns containing ZIP files.