VulnCheck observed 768 public reports of CVEs exploited in the wild for the first time in 2024, a 20% rise compared to 2023 This article has been indexed from www.infosecurity-magazine.com Read the original article: 768 CVEs Exploited in the Wild…
Category: www.infosecurity-magazine.com
European Police: Data Volumes and Deletion Hindering Investigations
A new Europol report warns of major challenges accessing and analyzing data for cybercrime investigations This article has been indexed from www.infosecurity-magazine.com Read the original article: European Police: Data Volumes and Deletion Hindering Investigations
UK Announces “World-First” AI Security Standard
The UK government has launched a new AI security code of practice it believes will become an ETSI standard This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Announces “World-First” AI Security Standard
Threat Actors Target Public-Facing Apps for Initial Access
Cisco Talos found that exploitation of public-facing applications made up 40% of incidents it observed in Q4 2024, marking a notable shift in initial access techniques This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actors Target…
Tata Technologies Hit by Ransomware Attack
The Indian tech giant temporarily suspended some of its IT services, which have now been restored This article has been indexed from www.infosecurity-magazine.com Read the original article: Tata Technologies Hit by Ransomware Attack
DeepSeek’s Flagship AI Model Under Fire for Security Vulnerabilities
Cyber reports exposed major security flaws in DeepSeek’s R1 LLM This article has been indexed from www.infosecurity-magazine.com Read the original article: DeepSeek’s Flagship AI Model Under Fire for Security Vulnerabilities
International Operation Dismantles Cracked and Nulled Cybercrime Hubs
A global law enforcement operation has taken down infrastructure used by Cracked.io and Nulled.io, which provide cybercriminal tools and services This article has been indexed from www.infosecurity-magazine.com Read the original article: International Operation Dismantles Cracked and Nulled Cybercrime Hubs
Google Blocked 2.36 Million Policy-Violating Apps
Google Play blocked 2.36 million policy-violating apps and banned 158,000 harmful developer accounts in 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Google Blocked 2.36 Million Policy-Violating Apps
Attackers Increase Use of HTTP Clients for Account Takeovers
HTTP client tools used to compromise Microsoft 365 environments with 78% of tenants targeted in 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Attackers Increase Use of HTTP Clients for Account Takeovers
Syncjacking Attack Enables Full Browser and Device Takeover
SquareX researchers warn that browser syncjacking could lead to full browser and device hijacking This article has been indexed from www.infosecurity-magazine.com Read the original article: Syncjacking Attack Enables Full Browser and Device Takeover
DeepSeek Exposed Database Leaks Sensitive Data
Researchers at Wiz uncovered a publicly accessible database belonging to Chinese GenAI provider DeepSeek that leaked sensitive data, including chat history This article has been indexed from www.infosecurity-magazine.com Read the original article: DeepSeek Exposed Database Leaks Sensitive Data
Ransomware Attack Disrupts Blood Donation Services in US
New York Blood Center Enterprises revealed that it has been hit by a ransomware attack, disrupting activities and blood drives at its centers across the country This article has been indexed from www.infosecurity-magazine.com Read the original article: Ransomware Attack Disrupts…
UK Organizations Boosting Cybersecurity Budgets
UK organizations are significantly increasing cybersecurity budgets, with a projected 31% growth in the next year This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Organizations Boosting Cybersecurity Budgets
NCSC Calls on Vendors to Eradicate “Unforgivable” Vulnerabilities
The UK’s National Cyber Security Centre has released a new paper making it easier to assess if a flaw is “unforgivable” This article has been indexed from www.infosecurity-magazine.com Read the original article: NCSC Calls on Vendors to Eradicate “Unforgivable” Vulnerabilities
AI Surge Drives Record 1205% Increase in API Vulnerabilities
AI-related API vulnerabilities surged 1,205% in 2024, with 99% tied to API flaws, according to a new report by Wallarm This article has been indexed from www.infosecurity-magazine.com Read the original article: AI Surge Drives Record 1205% Increase in API Vulnerabilities
Nation-State Hackers Abuse Gemini AI Tool
Google highlighted significant abuse of its Gemini LLM tool by nation state actors to support malicious activities, including research and malware development This article has been indexed from www.infosecurity-magazine.com Read the original article: Nation-State Hackers Abuse Gemini AI Tool
New Hellcat Ransomware Gang Employs Humiliation Tactics
Cato Networks highlighted how the recently emerged HellCat ransomware group is using novel psychological tactics to court attention and pressurize victims This article has been indexed from www.infosecurity-magazine.com Read the original article: New Hellcat Ransomware Gang Employs Humiliation Tactics
Threat Actors Exploit Government Websites for Phishing
Cybercriminals exploit government websites using open redirects and phishing tactics, bypassing secure email gateway protections This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actors Exploit Government Websites for Phishing
Breakout Time Accelerates 22% as Cyber-Attacks Speed Up
ReliaQuest warns threat actor innovation and infostealer activity helped to accelerate breakout time by 22% in 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Breakout Time Accelerates 22% as Cyber-Attacks Speed Up
Chinese GenAI Startup DeepSeek Sparks Global Privacy Debate
Government agencies and privacy watchdogs have started investigating the Chinese AI chatbot provider over data privacy concerns This article has been indexed from www.infosecurity-magazine.com Read the original article: Chinese GenAI Startup DeepSeek Sparks Global Privacy Debate