Tags → #stories

Threats
Monitoring of Gabagool Phishing Campaign Targeting Employees
Nov 20, 2024 The TRAC Labs team is monitoring a sophisticated phishing campaign named Gabagool, which targets corporate and government employees by utilizing Cloudflare R2 buckets to host malicious content.
Tools
New Defense Mechanism Proposed Against Model Poisoning in Federated Learning
Nov 20, 2024 Researchers from the University of Electronic Science and Technology of China have introduced a new defense mechanism called VERT to combat model poisoning attacks in Federated Learning systems.
Industry
New Multi-Cloud Networking Architecture Introduced with Zero Trust Principles
Nov 20, 2024 A recent paper presents a multi-cloud networking architecture based on zero trust principles and micro-segmentation techniques to enhance security and connectivity across various applications and workloads.
Threats
New XenoRAT Sample Targets Gamers Using Excel File
Nov 20, 2024 Researchers have discovered a new sample of XenoRAT, a remote access tool targeting gamers, which employs an Excel XLL file for delivery and indicates a shift towards enterprise network targeting.
Threats
NSHC Threat Research Lab Reports on Cyber Threat Actor Activities
Nov 20, 2024 The NSHC Threat Research Lab's report identifies 47 Threat Actor Groups and analyzes their activities, primarily targeting the finance and government sectors between August 21 and September 20, 2024.
Vulnerabilities
OSS-Fuzz Reports 26 New Vulnerabilities in Open Source Projects
Nov 20, 2024 OSS-Fuzz has reported 26 new vulnerabilities, including a critical flaw in OpenSSL, highlighting advancements in AI-driven fuzzing techniques for enhancing software security.
Threats
Overview of Browser Fingerprinting and Its Privacy Implications
Nov 20, 2024 Browser fingerprinting has become a prominent method for online user identification and tracking, raising privacy concerns due to its ability to operate without user consent.
Vulnerabilities
Security Vulnerabilities in IoT Devices Using HTTP Protocol
Nov 20, 2024 The article discusses the security vulnerabilities of IoT devices using the HTTP protocol and introduces ChatHTTPFuzz, a novel method that utilizes large language models to improve vulnerability detection in these devices.
Vulnerabilities
Study Analyzes Security Scanners for Large Language Models
Nov 20, 2024 A recent study analyzes open-source tools for scanning conversational large language models (LLMs) for vulnerabilities, highlighting the need for improved detection capabilities and collaboration to enhance their security.
Vulnerabilities
Study Examines Data Privacy Risks in Graph Neural Networks
Nov 20, 2024 Researchers from The Pennsylvania State University and Hong Kong University of Science and Technology have published a study addressing the risks of data leakage in Graph Neural Networks (GNNs) and introduced a framework called GraphSteal to reconstruct training graphs while safeguarding privacy.