WhatsApp currently blocks certain file types considered risky, but Python and PHP scripts are not included in the blocklist. Security researcher Saumyajeet Das identified this vulnerability while testing file attachments in WhatsApp conversations. This article has been indexed from Cyware…
Category: Cyware News – Latest Cyber News
Senators to FTC: Car Companies’ Data Privacy Practices Must be Investigated
U.S. senators have raised concerns about how car companies handle consumer data, revealing that major automakers share and sell drivers’ information without proper consent. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
National Vulnerability Backlog Could Surge to 30,000 by 2025
The National Vulnerability Database (NVD), maintained by the National Institute of Standards and Technology (NIST), currently has a backlog of over 16,000 vulnerabilities, with an average daily influx of more than 100 new security flaws. This article has been indexed…
Acronis Warns of Cyber Infrastructure Default Password Abused in Attacks
The vulnerability (CVE-2023-45249) was patched nine months ago but is still being exploited in attacks. Admins are advised to update their systems immediately to prevent unauthorized remote code execution. This article has been indexed from Cyware News – Latest Cyber…
Gh0stGambit Dropper Used to Deploy Gh0st RAT Against Chinese Users
The Gh0st RAT Trojan is being distributed to Chinese Windows users through a fake Chrome website. The malware has been around since 2008 and has evolved over the years, often used by cyberespionage groups in China. This article has been…
Data From Deleted Github Repositories May Not Actually be Deleted
Researchers at Truffle Security have found, or arguably rediscovered, that data from deleted GitHub repositories (public or private) and from deleted copies (forks) of repositories isn’t necessarily deleted. This article has been indexed from Cyware News – Latest Cyber News…
AI-Generated Deepfake Attacks Force Companies To Reassess Cybersecurity
Companies are reevaluating their cybersecurity defenses in response to the rise of AI-generated deepfake attacks and identity fraud. According to GetApp, 73% of US organizations have already developed deepfake response plans. This article has been indexed from Cyware News –…
Targeted PyPI Package Steals Google Cloud Credentials from macOS Devs
The malware is designed to target only 64 specific machines, attempting to exfiltrate Google Cloud Platform credentials for potential follow-on attacks such as data theft and malware implantation. This article has been indexed from Cyware News – Latest Cyber News…
Most CISOs Feel Unprepared for New Compliance Regulations
Most CISOs are feeling unprepared for new compliance regulations, such as the SEC’s cybersecurity disclosure rules in the USA and the Digital Operational Resilience Act (DORA) in the EU, presenting a significant challenge. This article has been indexed from Cyware…
White House, CISA Name Key Cybersecurity Officials as National Resilience Strategy Rollout Continues
The White House and CISA have named key cybersecurity officials as part of their national resilience strategy rollout. Harry Wingo will become the deputy national cyber director, while Bridget Bean is set to be the new executive director at CISA.…
Meta Nukes Massive Instagram Sextortion Network of 63,000 Accounts
Meta has taken down 63,000 Instagram accounts in Nigeria involved in sextortion scams, including a network of 2,500 accounts linked to 20 individuals targeting adult men in the US. This article has been indexed from Cyware News – Latest Cyber…
Dazz Snaps up $50M for AI-Based, Automated Cloud Security Remediation
Existing investors Greylock Partners, Cyberstarts, Insight Partners, and Index Ventures are collectively described as “leading” the round. Dazz, which launched in 2021, has now raised around $110 million in total. This article has been indexed from Cyware News – Latest…
French Police Push PlugX Malware Self-Destruct Payload to Clean PCs
The operation started in France on July 18, 2024, and is anticipated to extend to other countries like Malta, Portugal, Croatia, Slovakia, and Austria. Victims in France will be individually notified by the ANSSI about the clean-up process. This article…
NVIDIA Patches Flaw in Jetson Software Used in AI-Powered Systems
The flaw in the Jetson Linux component of the JetPack SDK impacts devices such as the Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series, and Jetson Nano. This article has been indexed from Cyware News –…
Report: 95% of Organizations Face Severe Software Supply Chain Risk
OSC&R report reveals that 95% organizations face high software supply chain risks. Despite advancements in application security programs, more work is needed to manage risks effectively. This article has been indexed from Cyware News – Latest Cyber News Read the…
Unveiling the Latest Banking Trojan Threats in Latin America
The malicious Chrome extension campaign in LATAM involves infecting victims through phishing websites and installing rogue extensions to steal sensitive information. The extensions mimic Google Drive, giving them access to a wide range of user data. This article has been…
Chainguard Raises $140M to Drive AI Support, Global Growth
Chainguard, a supply chain security startup, recently raised $140 million in a Series C funding round led by Redpoint Ventures, Lightspeed Venture Partners, and JVP. It aims to expand globally and strengthen its presence in the U.S. public sector. This…
National Defense University Cyber Professor Tapped as ONCD Deputy Director
The Office of the National Cyber Director (ONCD) announced Wednesday that former Navy SEAL and National Defense University cyberspace professor Harry Wingo has been selected as its deputy director. This article has been indexed from Cyware News – Latest Cyber…
The Most Urgent Security Risks for GenAI Users are all Data-Related
GenAI users face significant security risks related to data, with regulated data making up a large share of sensitive information shared with GenAI applications, posing a threat of costly data breaches. This article has been indexed from Cyware News –…
Software Maker MCG Health Settles Data Breach Suit for $8.8M
MCG Health has agreed to a settlement of $8.8 million for a data breach lawsuit following a hacking incident in 2020. The lawsuit alleges that it took MCG Health two years to discover and report the data theft affecting around…