Media reports highlight the sale of LLMs like WormGPT and FraudGPT on underground forums. Fears mount over their potential for creating mutating malware, fueling a craze in the cybercriminal underground. …
Vigil: Open-source Security Scanner for LLM Models Like ChatGPT
An open-source security scanner, developed by Git Hub user Adam Swanda, was released to explore the security of the LLM model. This model is utilized by chat assistants such as …
Slovenia’s Biggest Power Provider has Suffered a Cyberattack
One of Slovenia’s major power providers, HSE, has recently fallen victim to a significant cyberattack. The security and control system, along with the fire alarms, were breached by the criminal …
Genesis Market Technique: Hackers Exploited Node.js and EV Certificates
In the labyrinthine landscape of cyber threats, the Trend Micro Managed XDR team has uncovered a malevolent symphony echoing the tactics employed by the infamous Genesis Market. Trend Micro Managed …
Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable to Takeover – Hunters
BOSTON, MASS. and TEL AVIV, ISRAEL, November 28, 2023 – A severe design flaw in Google Workspace’s domain-wide delegation feature discovered by threat hunting experts from Hunters’ Team Axon, can …
ID Theft Service Resold Access to USInfoSearch Data
One of the cybercrime underground’s more active sellers of Social Security numbers, background and credit reports has been pulling data from hacked accounts at the U.S. consumer data broker USinfoSearch, …
APT Hackers Behind SysJoker Attacking Critical Industrial Sectors
SysJoker malware was initially discovered to be used by the APT group dubbed “WildCard” and targeted Israel’s educational sector. However, the operations of this APT threat actor have expanded to …
Ardent Health Ransomware Attack: Multiple Hospitals Affected
The information technology systems of Ardent Health Services were targeted in a recent ransomware attack which has resulted in a major cybersecurity incident. As a result of this attack, the …
OwnCloud Critical Vulnerability Exploited in the Wild
Owncloud was discovered with a new vulnerability associated with exposing sensitive information to an unauthorized third party that was assigned with CVE-2023-49103 and a severity rating of 10.0 (Critical). ownCloud …
CISA & NCSC Discloses Guidelines for Secure AI System Development
The US Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (NCSC) released the Guidelines for Secure AI System Development to address the integration of artificial …