Chrome 123: Patch for 12 Security Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Chrome team has proudly announced that Chrome 123 has been promoted to the stable channel for users on Windows, Mac, and Linux. This latest version, Chrome 123.0.6312.58 for Linux and 123.0.6312.58/.59 for Windows and Mac, is set to roll …

Microsoft Notifies DevOps Teams That Major Domain Change Is Coming

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is unifying its cloud domain for Microsoft 365 services under “cloud.microsoft” to streamline the user experience and administration, which aims to reduce domain fragmentation for authenticated user-facing apps and services.  The consolidation will enhance security, simplify administration with consistent …

Smoke Loader Attacking Financial Institutions Running Microsoft Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The reason hackers go after financial institutions is because these places have valuable things like money, intellectual property, and sensitive customer information.  Hacked financial systems can result in monetary gain by means of theft, blackmail or disservice interruption. Cybersecurity researchers …

Researchers Detailed Red Teaming Malicious Use Cases For AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers investigated potential malicious uses of AI by threat actors and experimented with various AI models, including large language models, multimodal image models, and text-to-speech models.  Importantly, they did not fine-tune or provide additional training to the models, simulating the …

Broadcom’s CEO Showcases VMware’s initial 100-day Achievements

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VMware has completed its first 100 days under Broadcom’s wing, beginning a transformative journey toward becoming the world’s leading infrastructure technology company. This period has seen substantial progress, with strategic changes to enhance customer value, simplify operations, and foster innovation. …

What does ‘AI Washing’ mean? Firms Fined $400K by SEC for Exaggerated Statements

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Securities and Exchange Commission (SEC) has fined two investment advisers, Delphia (USA) Inc. and Global Predictions Inc., $400,000 for making false and misleading claims about their use of artificial intelligence (AI). This action underscores the regulatory body’s commitment to …

US Welcomes Other Countries to Join Fight Against Spyware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A coalition of democratic nations has come together to address the growing threat posed by the misuse of commercial spyware. The United States and 17 other countries have issued a joint statement recognizing the need for stringent controls to prevent …

CISA, NSA & FBI Warns of Volt Typhoon Attacking Targeting Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity and Infrastructure Security Agency (CISA), along with the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), and international partners, have issued a stark warning about a sophisticated cyber threat group known as “Volt Typhoon.” This group, backed …

Hackers Advertising GlorySprout Stealer On Popular Hacking Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use stealers to gather sensitive information, for example, login credentials, financial data, or personal details from victims’ devices. These stolen credentials can be employed in countless nefarious acts such as identity theft, financial fraud, or account hacking. RussianPanda recently …

PoC Published for Critical RCE Vulnerability in Fortra FileCatalyst

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof of Concept (PoC) has been published for a critical Remote Code Execution (RCE) vulnerability identified in Fortra’s FileCatalyst software. This vulnerability, tracked as CVE-2024-25153, poses a severe threat to organizations using the FileCatalyst Workflow Web Portal. It potentially …