Sat.Aug 31, 2024

article thumbnail

Weekly Update 415

Troy Hunt

I still find the reactions to the Telegram situation with Durov's arrest odd. There are no doubt all sorts of politics surrounding it, but even putting all that aside for a moment, the assertion that a platform provider should not be held accountable for moderating content on the platform is just nuts. As I say in this week's video, there's lots of content that you can put in the "grey" bucket (free speech versus hate speech, for example) and there are valid arguments to b

article thumbnail

North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit

The Hacker News

A recently patched security flaw in Google Chrome and other Chromium web browsers was exploited as a zero-day by North Korean actors in a campaign designed to deliver the FudModule rootkit. The development is indicative of the persistent efforts made by the nation-state adversary, which had made a habit of incorporating rafts of Windows zero-day exploits into its arsenal in recent months.

126
126
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

4 Tips for Optimizing Your GRC Strategy

Security Boulevard

Why GRC strategies are often not as effective as they could be, and specific practices businesses can adopt to improve GRC operations. The post 4 Tips for Optimizing Your GRC Strategy appeared first on Security Boulevard.

Risk 122
article thumbnail

North Korea-linked APT Citrine Sleet exploit Chrome zero-day to deliver FudModule rootkit

Security Affairs

North Korea-linked APT exploited the recently patched Google Chrome zero-day CVE-2024-7971 to deploy the FudModule rootkit. North Korea-linked group Citrine Sleet (aka AppleJeus , Labyrinth Chollima , UNC4736, Hidden Cobra ) have exploited the recently patched Google Chrome zero-day CVE-2024-7971 (CVSS score 8.8) to deploy the FudModule rootkit , states Microsoft.

article thumbnail

Bringing the Cybersecurity Imperative Into Focus

Tech leaders today are facing shrinking budgets and investment concerns. This whitepaper provides insights from over 1,000 tech leaders on how to stay secure and attract top cybersecurity talent, all while doing more with less. Download today to learn more!

article thumbnail

Modern Strategies for IoT Device Fingerprinting

Security Boulevard

The widespread adoption of IoT devices has created new cybersecurity challenges, including those related to external attack surface management. The post Modern Strategies for IoT Device Fingerprinting appeared first on Security Boulevard.

IoT 115
article thumbnail

Taylor Swift Concert Terror Plot Was Thwarted by Key CIA Tip

WIRED Threat Level

Plus: China-linked hackers infiltrate US internet providers, authorities crack down on a major piracy operation, and a ransomware gang claims attacks during the Paris Olympics.

More Trending

article thumbnail

Evasive Phishing Campaign Delivers AsyncRAT and Infostealer

Penetration Testing

Cybersecurity researchers at eSentire’s Threat Response Unit (TRU) have uncovered a sophisticated phishing campaign distributing the AsyncRAT remote access trojan (RAT) coupled with the Infostealer plugin. The attack employs deceptive... The post Evasive Phishing Campaign Delivers AsyncRAT and Infostealer appeared first on Cybersecurity News.

article thumbnail

Happy United States Labor Day Weekend 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024

Security Boulevard

Permalink The post Happy United States Labor Day Weekend 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024 appeared first on Security Boulevard.

62
article thumbnail

ManticoraLoader: The New Malware-as-a-Service Threat

Penetration Testing

Cyble Research & Intelligence Labs (CRIL) has uncovered the release of a new malware-as-a-service (MaaS) tool known as ManticoraLoader. The service, announced by the notorious threat actors behind the infamous... The post ManticoraLoader: The New Malware-as-a-Service Threat appeared first on Cybersecurity News.

Malware 57