Cyber GRC software company Cypago has announced a new automation solution for artificial intelligence (AI) governance, risk management and compliance. This includes implementation of NIST AI RMF and ISO/IEC 42001, …
Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers
On April 9, Twitter/X began automatically modifying links that mention “twitter.com” to redirect to “x.com” instead. But over the past 48 hours, dozens of new domain names have been registered …
Mysterious Index Bug Haunts a Tech Company’s Search Engine Project
A mysterious bug has plagued a major tech company’s search engine project since February, randomly failing the index construction process. The issue is related to the code that merges partial …
New XploitSPY Android Malware Attacking Indian Users Mimic as Messaging Apps
ESET researchers have unveiled an espionage campaign called eXotic Visit. The campaign targets Android users by masquerading as benign messaging apps. This campaign, active since late 2021, cleverly disguises the …
Chrome Enterprise Premium With New AI Security Features
Google has unveiled a significant upgrade to its enterprise browsing capabilities with the launch of Chrome Enterprise Premium. This new offering is designed to support endpoint security, providing a more …
Multiple Fortinet Vulnerabilities Let Attackers Execute Arbitrary Code
Multiple vulnerabilities have been discovered in FortiOS and FortiProxy that were related to administrator cookie leakage, arbitrary command execution and sensitive information exposure. These vulnerabilities have been assigned with CVEs …
Hackers Attacking Infra Teams With Fake PuTTY & FileZilla Ads
A sophisticated malvertising campaign is targeting system administrators across North America. The attackers are using fake ads for popular system utilities to distribute a dangerous strain of malware known as Nitrogen. Step 1: Luring Victims with Malicious Ads The …
Quickly Check if a Sample is Malicious with ANY.RUN Sandbox Process Tree
ANY.RUN’s Process Tree shows all the processes that start when a file or URL is run in its sandbox, along with their hierarchical relationships.This is accomplished by capturing the initial …
April’s Patch Tuesday Brings Record Number of Fixes
If only Patch Tuesdays came around infrequently — like total solar eclipse rare — instead of just creeping up on us each month like The Man in the Moon. Although …
French Football Club Ticketing System Targeted in Cyber Attack
Paris Saint-Germain (PSG), one of France’s premier football clubs, has been the victim of a cyber attack. The club’s ticketing system was explicitly targeted, raising concerns over data security and …