New Jailbreak Attacks are revealed in LLM Chatbots like ChatGPT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

LLMs have reshaped content generation, making understanding jailbreak attacks and prevention techniques challenging. Surprisingly, there’s a scarcity of public disclosures on countermeasures employed in chatbot services that are commercial LLM-based. A practical study has been conducted by cybersecurity analysts from …

HCL BigFix WebUI Flaw Redirects User to External Site

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

HCL BigFix is an endpoint management platform that has the capability to automate discovery, management, and remediation. It can find and fix vulnerabilities on endpoints, whether it be on-premises, cloud, or virtual environments, regardless of the operating system, location, or …

Hackers Could Deactivate Your WhatsApp Account With A Simple Email

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It has been reported that any individual could potentially deactivate a WhatsApp account by sending an email, and currently, there is no known method to prevent this from happening. This information has been shared with all WhatsApp users. The fact …

CISA Urge Gov Agencies to Apply Patch for Windows and Office zero-days Immediately

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA urged government agencies to apply the patch immediately for Microsoft Office and Windows HTML remote code execution vulnerabilities exploited in the wild. As a result, these vulnerabilities have frequently been exploited and pose significant risks to the federal enterprise. …

JumpCloud Hacked – Hackers Breached The Systems Via Spear-Phishing Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated nation-state adversary with advanced capabilities attacked Jumpcloud with a spear phishing attack. JumpCloud is a US-based zero-trust directory platform that customers use to authenticate, authorize, and manage users, devices, and applications.  On July 12, JumpCloud disclosed that its …

LeakedSource Owner Quit Ashley Madison a Month Before 2015 Hack

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] In 2019, a Canadian company called Defiant Tech Inc. pleaded guilty to running LeakedSource[.]com, a service …

IT Security Analyst Jailed for Impersonating as a Hacker in Own Company

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A 28 years old Former IT security analyst of an Oxford-based company has been sentenced to three years for deceiving the company to extort money. On 27 February 2018, the man impersonated a ransomware group that targeted the company at …

Massive Exploit Against WooCommerce Payments Underway Bug on 600,000 Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers actively target vulnerable WordPress websites in an effort to take advantage of a widespread WooCommerce Payments plugin vulnerability and gain admin rights. The WooCommerce Payments plugin, with more than 600,000 active installations, facilitates credit and debit card payments in …

PentestGPT – A ChatGPT Empowered Automated Penetration Testing Tool

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyber Security News has found a new ” PentestGPT ” tool that helps penetration testers automate their pentesting processes, and ChatGPT powers it. A Ph.D. student at Nanyang Technological University, operating under “GreyDGL” on GitHub, recently released a new ChatGPT-powered …

ChatGPT For Penetration Testing – An Effective Reconnaissance Phase of Pentest

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ChatGPT enhances information security by providing valuable insights for efficient reconnaissance in penetration testing and serving as an additional source of security information. Generative pre-trained transformer language models are growing rapidly with unseen and shocking capabilities.  Recently GBHackers on Security …