Category: EN

AI-generated deepfakes and investment scams

Financial scams are like that one guest at the party who just won’t leave, constantly evolving and finding new ways to crash our digital lives. Lately, they’ve taken a turn for the futuristic with AI-generated videos popping up in investment…

Scans for Fortinet FortiOS and the CVE-2024-21762 vulnerability, (Wed, Mar 20th)

Late last week, an exploit surfaced on GitHub for CVE-2024-21762 [1]. This vulnerability affects Fortinet's FortiOS. A patch was released on February 8th. Owners of affected devices had over a month to patch [2]. A few days prior to the GitHub…

BunnyLoader 3.0 surfaces in the threat landscape

Researchers found a new variant of the BunnyLoader malware with a modular structure and new evasion capabilities. In October 2023, Zscaler ThreatLabz researchers discovered a new malware-as-a-service (MaaS) called BunnyLoader, which was advertised for sale in multiple cybercrime forums since September 4, 2023.…

Stalkerware usage surging, despite data privacy concerns

At least 31,031 people affected last year Stalkerware has reached “pandemic proportions,” according to Kaspersky, which documented a total of 31,031 people affected by the intrusive software in 2023 – up almost six percent on the prior year.… This article…

Kubernetes 1.30: A Security Perspective

Kubernetes 1.30 marks a significant milestone in the evolution of the widely used orchestration platform, particularly regarding security The post Kubernetes 1.30: A Security Perspective appeared first on ARMO. The post Kubernetes 1.30: A Security Perspective appeared first on Security…

Closing the False Positives Gap for SOC Efficiency

Eliminating false positives can remarkably enhance security operations center (SOC) efficiency and cost-effectiveness. The post Closing the False Positives Gap for SOC Efficiency appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article:…

Androxgh0st Exploits SMTP Services To Extract Critical Data

AndroxGh0st is a malware that specifically targets Laravel applications. The malware scans and extracts login credentials linked to AWS and Twilio from .env files. AndroxGh0st was previously classified as an SMTP cracker since it exploits SMTP using various strategies such…