October 18, 2023 1 Comment One of the oldest malware tricks in the book — hacked websites claiming visitors need to update their Web browser before they can view any …
Hackers Use Fake Browser Updates to Install Malware on Users’ Computer
Malware distribution on users’ computers is achieved through phony browser updates presented on websites that hackers have hijacked. When a user visits a hacked website, they may see a message …
IT Admins Set Admin Portal Passwords to ‘admin’ – Almost 40,000 Entries Found
IT admins can be considered culpable for weak password use if they fail to enforce strong password policies or neglect proper security measures. Their responsibility includes setting and maintaining robust …
D-Link Hacked: Hackers Steal Source Code and Customer Personal Information
D-Link Hacked: Hackers Steal Source Code and Customer Personal Information By Guru – October 18, 2023 D-Link Corporation, a multinational company that provides innovative networking solutions for both consumer and …
CISA, FBI Warns of Critical Atlassian Zero-Day Flaw Under Active Attack
A serious security flaw in some versions of Atlassian Confluence Data Center and Server has been exploited by hackers. They have used this flaw to create fake admin accounts and …
Titan File Transfer Server Flaws Let Attackers Execute Remote Code
Multiple vulnerabilities have been discovered in Titan MFT and Titan SFTP servers owned by South River Technologies, which were associated with Information Disclosure, Session Fixation, and Remote code execution. However, …
Tech CEO Sentenced to 5 Years in IP Address Scheme
Amir Golestan, the 40-year-old CEO of the Charleston, S.C. based technology company Micfo LLC, has been sentenced to five years in prison for wire fraud. Golestan’s sentencing comes nearly two …
Top 10 Best Insider Risk Management Platforms 2023
Insider Risk refers to the potential harm or negative impact that can arise from any illicit or unauthorized activity carried out by an individual within an organization who has legitimate …
Threat Actors Actively Exploiting Cisco IOS XE Zero-day Vulnerability
Threat actors exploit zero-day vulnerabilities because these flaws are unknown to the software developers, making them highly effective for launching attacks. Exploiting zero-days allows malicious actors to bypass security measures …
ChatGPT for Vulnerability Detection – Prompts Used and their Responses
Software vulnerabilities are essentially errors in code that malicious actors can exploit. Advanced language models such as CodeBERT, GraphCodeBERT, and CodeT5 can detect these vulnerabilities, provide detailed analysis assessments, and …