Tags → #stories

Study Reveals Security Risks in VS Code Extensions

A recent study has found that 5.6% of third-party extensions for Visual Studio Code exhibit suspicious behaviors, raising concerns about security vulnerabilities in software development environments.
Study Reveals Vulnerabilities in Large Language Models

A recent study has introduced a new framework called DrAttack, which enhances the success rate of jailbreak attacks on Large Language Models by employing a comprehensive approach that includes decomposition, implicit reconstruction, and synonym search.
Surge in Phishing Emails Highlights Cybersecurity Threats

A recent increase in phishing emails has raised concerns about cybercriminals attempting to extract money and sensitive information from individuals through manipulative tactics.
Trend Micro Identifies EDRSilencer Tool Used by Cyber Threat Actors

Trend Micro's Threat Hunting Team has identified the use of EDRSilencer, a tool that interferes with endpoint detection and response solutions, by cyber threat actors, complicating malware detection and mitigation efforts.
Trustwave Research Identifies Risks to U.S. Election System

Trustwave SpiderLabs has completed a research project assessing risks to the U.S. election system, revealing no significant threats but emphasizing the need for proactive security measures.
Vulnerability Discovered in Filecoin Network Clients

A vulnerability identified in the Lotus and Venus clients of the Filecoin network allowed for remote node crashes, prompting a switch to unsigned integers for improved security.
Advancements in Membership Inference Attacks Research Introduced

A recent research paper presents the Loss Trace IQR (LT-IQR) method, which improves the efficiency of Membership Inference Attacks by identifying vulnerable data samples with reduced computational resources compared to traditional approaches.
Advancements in Private Information Retrieval Client Preprocessing

A recent paper presents advancements in Private Information Retrieval (PIR) by introducing a novel single-server scheme that improves client storage and server time through innovative preprocessing techniques.
Advancements in Verification of Jolt zkVM Lookup Semantics

A recent paper discusses advancements in zero-knowledge virtual machines (zkVMs), focusing on the verification processes of Jolt zkVM, which utilizes the RISC-V instruction set architecture to enhance cybersecurity.
Android Spynote Malware Disguises as Antivirus Software

Android Spynote malware has surfaced as a significant threat to Android devices by disguising itself as legitimate antivirus software and employing various tactics to gain unauthorized access.