PentestGPT – A ChatGPT Empowered Automated Penetration Testing Tool

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyber Security News has found a new ” PentestGPT ” tool that helps penetration testers automate their pentesting processes, and ChatGPT powers it. A Ph.D. student at Nanyang Technological University, operating under “GreyDGL” on GitHub, recently released a new ChatGPT-powered …

ChatGPT For Penetration Testing – An Effective Reconnaissance Phase of Pentest

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ChatGPT enhances information security by providing valuable insights for efficient reconnaissance in penetration testing and serving as an additional source of security information. Generative pre-trained transformer language models are growing rapidly with unseen and shocking capabilities.  Recently GBHackers on Security …

Top 10 Best Cyber Attack Simulation Tools – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyberattack is not at all a distant threat. Any organization can be its target. This type of cyber attack simulation is a method of computer security testing. These identify the vulnerabilities and attack the technique that the malicious actors use. …

Microsoft Struggling to Find How Hackers Steal the Azure AD Signing Key

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

China’s Storm-0558 hacked 25 organizations, including government agencies, using fake tokens for email access, aiming at espionage since May 15, 2023. However, Storm-0558’s campaign was blocked by Microsoft without affecting other environments. Not only that even, Microsoft also acted promptly …

Securing Endpoints: 6 Best Practices to Eliminate Blind Spots

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In today’s age of widespread device collaboration, the number of endpoints within an organization is often enormous. On top of this, Endpoints are now among the most preferred targets for an attacker trying to gain initial access to a corporate …

Hackers Actively Exploiting Zero-day Flaw in Zimbra Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zimbra is a widely used email client used by many organizations worldwide. The Zimbra Collaboration Suite provides a much more comprehensive package of document storage, Editing, instant messaging, mini calendar, and other ease of access administrative controls. Recent reports indicate …

Hackers Use WebAPK to Install Malware as Native Application on Android Device

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The latest research reveals a new sophisticated attack carried through Webapk technology targeting Android devices. The threat actors manipulate the user to install malicious web apk through a Smishing attempt by impersonating legit banking sources. The CSIRT KNF team carried …

Cisco SD-WAN vManage Flaw: Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical severity vulnerability has been detected in the request authentication validation for the REST API of the Cisco SD-WAN vManage software. Cisco released a security warning alerting users to the CVE-2023-20214 critical vulnerability. This could allow a remote, unauthenticated …

Top Information Security Threats for Businesses 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Businesses face a myriad of information security risks that can be detrimental to their operations. Information security threats evolve rapidly, and new threats may appear that are not yet known. Nonetheless, here are some major cyber security threats that have …

Hackers Use New .NET Loader Malware to Deliver Wide Range of Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An unrecorded .NET Loader was identified during routine threat hunting that downloads, decrypts, and executes a wide range of malicious payloads.  Multiple threat actors extensively distributed this new loader in early June 2023 through the following mediums:- Malicious phishing emails …