PyRIT : Automated AI Toolkit For Security Professionals

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Python automation framework has been released for risk identification in generative AI. This new framework has been named “PyRIT,” and it can help security professionals and machine learning engineers find risks in their generative AI systems. Microsoft stated …

Hijacked PyPI Package Installs NovaSentinel Stealer on Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers identified a sophisticated cyberattack through a dormant Python Package Index (PyPI) package named Django-log-tracker, which was unexpectedly updated to deploy the NovaSentinel stealer malware. This discovery highlights a significant threat to the software supply chain, emphasizing the need for …

Windows Malware Dropped From Fake Software Developers Job Offers Scheme

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

February 24, 2024 – Phylum, a leader in cybersecurity research, has unveiled a sophisticated malware campaign aimed at software developers seeking employment. This alarming scheme, identified in collaboration with Palo Alto Network’s Unit 42, involves fake developer job offers that …

Huge Surge In Attacks Exploiting User Credentials To Hack Enterprises

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There are currently billions of compromised credentials available on the Dark Web, making it the easiest route for criminals to exploit legitimate accounts. Info-stealing malware, which is meant to obtain personally identifiable information such as email addresses, passwords for social …

Researchers Unveild Apple’s Shortcuts Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers uncovered the vulnerability in Apple’s Shortcuts application, which could leave users’ privacy at risk. This vulnerability highlights the importance of maintaining constant and rigorous security measures to protect sensitive data. The vulnerability, CVE-2024-23204, has raised concerns due to the …

LockBit Gang Money Flow Uncovered : New Strain Under Development

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over the past few years, LockBit, a ransomware-as-a-service (RaaS) operation, has been linked to multiple security incidents affecting organizations worldwide. Yet, they appear to have experienced a lot of logistical, technological, and reputational issues recently. Due to this, LockBit had …

ScreenConnect Security Flaw Exploited In The Wild By Attackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The ScreenConnect software is a popular choice for remote access among organizations worldwide. However, recent vulnerabilities have raised concerns about potential exploitation by attackers. Specifically, these vulnerabilities could allow attackers to access vulnerable instances and distribute ransomware or other malicious payloads …

New SSH-Snake Malware Abuses SSH Credentials To Spread Itself In The Network

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors abuse SSH credentials to gain unauthorized access to systems and networks. By exploiting weak or compromised credentials, they can execute malicious activities. SSH credential abuse provides a stealthy entry point for threat actors to compromise and control the …

How to Analyse Crypto Malware in ANY.RUN Sandbox ?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ANY.RUN, an interactive malware sandbox, has published a comprehensive analysis of the growing threat that crypto-malware poses in a time when it is more important than ever to have strong digital security. This malicious software, designed to covertly mine cryptocurrency …

Russian Government Software Hijacked to Install Konni RAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical cybersecurity incident recently occurred where the Konni Remote Access Trojan (RAT), a highly covert and sophisticated malware that specializes in data exfiltration, infiltrated the software systems of the Russian Government. This incident, uncovered by the German cybersecurity firm …