Tags → #stories

HackerOne Introduces New Analytics Query Language HAQL

HackerOne has introduced the HackerOne Analytics Query Language (HAQL) to enhance data analytics and dashboard creation for its users.
Increase in SVG Attachments Used in Phishing Campaigns

Threat actors are increasingly using Scalable Vector Graphics (SVG) attachments in phishing and malware distribution campaigns, raising significant security concerns.
Jailbreaking Techniques and Security Risks in Large Language Models

The practice of jailbreaking Large Language Models (LLMs) involves manipulating AI systems to produce unintended outputs, raising concerns about potential security vulnerabilities and prompting research into enhancing their security.
Meta's Llama Model Used in Military Applications and Policy Shift

Meta Platforms Inc.'s Llama large language model has garnered attention for its use in both commercial and military applications, prompting discussions about its accessibility and implications for national defense.
New Threat Intelligence Platform Enhances Cybersecurity Measures

A new Threat Intelligence Platform (TIP) has been launched to enhance cybersecurity for organizations by integrating various data sources and employing advanced technologies to monitor and mitigate diverse threats.
Passkeys Proposed as Alternative to Traditional Passwords

Passkeys, proposed as a modern alternative to traditional passwords, aim to enhance online security through public key cryptography while addressing usability challenges for widespread adoption.
Survey Examines AI Adoption in Cybersecurity Industry

HackerOne and the SANS Institute conducted a survey revealing that 66% of cybersecurity professionals are using AI technologies, with many acknowledging its benefits in threat detection and incident response, while also expressing concerns about ethical implications and potential risks.
Volexity Identifies Vulnerability in Fortinet's FortiClient VPN

In July 2024, Volexity discovered a vulnerability in Fortinet's FortiClient VPN that allows user credentials to persist in memory, which has been exploited by the threat actor BrazenBamboo using their DEEPDATA malware.
How to Automate Malware Analysis and Unpack Obfuscated Samples with x64dbg

A recent video by MalwareAnalysisForHedgehogs demonstration highlights the capabilities of x64dbg in unpacking a complex 4-stage malware sample, showcasing various techniques and tools used in malware analysis.
Analysis of WezRat Malware Attributed to Iranian Group

Check Point Research has analyzed WezRat, a modular infostealer attributed to the Iranian cyber group Emennet Pasargad, which has been linked to various cyber operations and distributed through phishing emails targeting Israeli organizations.