BingBang – A New Bing Vulnerability that Can be Exploited Without Executing a code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

BingBang – A New Bing Vulnerability that Can be Exploited Without Executing a code By Guru – March 31, 2023 Azure Active Directory (AAD) has a new attack vector that affected Microsoft’s Bing.com, according to Wiz Research. A widespread AAD …

New Malware Dubbed Mélofée Attacking Linux Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ExaTrack found a new undetected implant family called Mélofée that targets Linux systems. Three samples of the previously known malicious software, dating from the beginning of 2022, were found by analysts. Chinese state-sponsored APT groups, including the notorious Winnti group, …

Microsoft Introduces New GPT-4 Tool to The Cybersecurity Battlefield

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently Microsoft launched Security Copilot which marks Microsoft’s continued attempt to embed AI-oriented features at a rapid pace and large scale to offer an end-to-end defense to cybersecurity experts. OpenAI’s latest generative artificial intelligence model GPT-4 is used by Security …

Europol Warns That Hackers Use ChatGPT to Conduct Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Europol Innovation Lab recently conducted workshops with experts from Europol to investigate the potential for criminal abuse of language models like ChatGPT and their usefulness for investigators. In the Europol Innovation Lab, innovative solutions are developed for improving the way …

MacStealer – New macOS-Based Malware Steals Passwords, Cookies & Credit Cards From Browser

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Uptycs threat research team recently discovered “MacStealer,” a new information-stealing malware designed to target Apple’s macOS operating system. It aims to steal various sensitive information, including credentials stored in the:-  iCloud KeyChain Web browsers Cryptocurrency wallets Potentially sensitive files MacStealer …

UK Sets Up Fake Booter Sites To Muddy DDoS Market

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

March 28, 2023 0 Comments The United Kingdom’s National Crime Agency (NCA) has been busy setting up phony DDoS-for-hire websites that seek to collect information on users, remind them that launching DDoS attacks is illegal, and generally increase the level …

Hackers Exploiting ChatGPT’s Popularity to Spread Malware via Hacked FB Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers recently conducted an investigation and uncovered alarming information regarding 13 Facebook pages and accounts. These pages and profiles have been compromised by the threat actors, and the most shocking thing about these pages and accounts, they have more than …

Linux Kernel Vulnerabilities in Ubuntu Let Hackers Launch DOS Attack & Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Several security vulnerabilities were recently addressed by Canonical in both Graphviz and the Linux kernel of Ubuntu. Recent discoveries include null pointer dereference vulnerabilities in Graphviz and improper handling of indirect branch prediction isolation between L1 and L2 VMs in …

Explosive USB Drive Bomb that Gets Detonated when Plugged into Computer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Journalists across Ecuador were targeted using a novel bomb resembling a USB drive. Once inserted into a computer, these devices detonate. According to a report from CBS News, over five Ecuadorian journalists, they received a USB letter bomb from Quinsaloma. …

6 Best Free Malware Analysis Tools to Break Down the Malware Samples – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The malware analysis tools simply allow us to know in a quick and effective way, what actions a threat makes in the system. In this way, you can easily collect all the information about the created files, network connections, changes …