How LLM-like Models like ChatGPT patch the Security Gaps in SoC Functions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The emergence of Large Language Models (LLMs) is transforming NLP, enhancing performance across NLG, NLU, and information retrieval tasks. They are primarily excellent in text-related tasks like generation, summarization, translation, and reasoning, demonstrating remarkable mastership. A group of cybersecurity analysts …

Nation-state Hackers Exploiting Confluence Zero-day Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has detected the nation-state threat actor Storm-0062, also known as DarkShadow or Oro0lxy, exploiting CVE-2023-22515 in the wild since September 14, 2023.  The vulnerability was publicly disclosed on October 4, 2023, and this CVE-2023-22515 is a Confluence zero-day vulnerability. …

Top 10 Best SaaS Security Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security management across multiple Software-as-a-Service (SaaS) clouds can present challenges, primarily stemming from the heightened prevalence of malware and ransomware attacks. In the present landscape, organizations encounter many challenges with Software-as-a-Service (SaaS). One of the main challenges businesses face is …

SAP Patches for XSS, Log Injection & Other Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SAP has released the security patches for the Patch Day of October 2023, in which they release new Security Notes and 2 updates to the previously released Security Notes.  There were 7 security vulnerabilities, including Cross-site scripting (XSS), Missing XML …

HTTP/2 Rapid Reset Zero-day Flaw Exploited to Launch Massive DDoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloudflare was unexpectedly hit by an enormous HTTP attack that peaked at over 201 million requests per second. Starting on August 25, 2023, this onslaught posed a significant challenge, especially considering that it was initiated by a relatively modest botnet …

Patch Tuesday, October 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today issued security updates for more than 100 newly-discovered vulnerabilities in its Windows operating system and related software, including four flaws that are already being exploited. In addition, Apple recently released emergency updates to quash a pair of zero-day …

New APT Group Using Custom Malware to Attack Manufacturing & IT Industries

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An unidentified APT group deployed custom malware and public tools to target organizations in Taiwan’s following sectors:- Manufacturing IT Biomedical This campaign also targeted a government agency in the Pacific Islands, along with organizations in the following two countries:- Vietnam …

Hackers Exploiting Citrix NetScaler Vulnerability to Steal User Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors were attacking unpatched NetScaler Gateways using the vulnerability classified as CVE-2023-3519 to inject malicious script into the HTML of the authentication web page and steal user credentials. With a CVSS score of 9.8, CVE-2023-3519 is a critical vulnerability that affects …

U.S. Army Sergeant Arrested for Spying Secrets to China: DoJ

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a shocking turn of events, a former U.S. Army Sergeant, Joseph Daniel Schmidt, has been arrested and indicted on charges of attempting to deliver national defense information and retaining such information.  Schmidt, whose last military assignment was at Joint …

ChatGPT, FraudGPT, and WormGPT Plays A Vital Role in Social Engineering Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ChatGPT, FraudGPT, and WormGPT Plays A Vital Role in Social Engineering Attacks By Tushar Subhra Dutta – October 10, 2023 Generative AI models like ChatGPT, FraudGPT, and WormGPT bring innovation and new challenges in cybersecurity’s evolution. These generative AI models …