ChatGPT for Digital Forensic – AI-Powered Cybercrime Investigation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI’s ChatGPT (GPT-3.5, GPT-4) and other LLMs like BERT, Bard, etc. have sparked widespread debate due to their disruptive applications across various fields.  These LLM modules generate answers and solutions promptly based on comprehensive text-based training data and rapidly growing …

12 Best Vulnerability Management Tools 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Vulnerability Management Tools play a significant role in detecting, analyzing, and patching vulnerabilities in web and network-based applications. Vulnerability, risk, and threat are the most common words used when it comes to security. Risk is the potential for damage or …

Few Fortune 100 Firms List Security Pros in Their Executive Ranks

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Many things have changed since 2018, such as the names of the companies in the Fortune 100 list. But one aspect of that vaunted list that hasn’t shifted much since is that very few of these companies list any security …

Apache OpenMeeting Flaw Allows Server Hijacks and Command Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenMeetings is an application that can be used for video calls, collaborative work, and presentations. It can also be added as a plugin to Jira, Confluence or Drupal applications. Recent reports shared by SonarSource, indicate that a newly discovered vulnerability …

What is Cloud-native Web Application Firewall (Cloud-native WAF)? 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

With your on-premise security solution comprising hardware, software, signatures, rules, and machine learning, you may think your applications are fully protected. How do you know for sure that your apps are secured? And what if you’ve cloud-native apps? Can a …

Hackers Exploiting Critical Citrix NetScaler Zero-day Flaw To Deploy Webshells

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) recently released a security advisory that indicates that threat actors have been exploiting a Zero-day vulnerability in Citrix ADC (Application Delivery Controller) and NetScaler Gateways. A vulnerability was discovered that enabled the placement …

Hackers Use Fake Update Page Mimicking Victim’s Browser to Deliver NetSupport RAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors deliver NetSupport RAT through a new campaign called Fake SG which could rival with SocGholish. This campaign utilizes hacked WordPress websites to display a custom landing page mimicking the victim’s browser to deliver payloads to compromise victims. According …

Mallox Ransomware Attacking MS-SQL Servers to Compromise Victims’ Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new ransomware strain dubbed, Mallox (aka TargetCompany, FARGO, and Tohnichi) is actively targeting and attacking Microsoft SQL (MS-SQL) servers. Since June 2021, this new ransomware strain has been active, and it’s noteworthy, as it targets the MS-SQL servers that …

Hackers Fraudulent Job offers to target University Students

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Campaigns of Fraudulent Job offers target university students in North America, asking victims to pay a fee in exchange for work. The campaigns began as early as March 2023 and continued through June 2023; the threat actors were purported to …

P2P Worm Attacking 307,000 Redis Instances on Linux and Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

P2PInfect is a new P2P worm that is actively targeting the Redis servers on Linux and Windows OS, making it highly scalable and powerful compared to others. While not all Redis instances are vulnerable, they should still anticipate compromise attempts …