Category: Shorts

Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulner The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three more vulnerabilities to its Catalog of Exploited Vulnerabilities for Enterprises. The latest addition to the list is a bug in Oracle WebLogic Server version 12.2.1.0 that allows an unauthenticated attacker with network access with network…

Amazon Adds Prime Video Originals to its Free Streaming Service Amazon is adding over 100 original Prime Video titles to Freevee, the company’s free ad-supported streaming option, this year. This includes the first three episodes of shows like The Summer I Turned Pretty and A League of Their Own, as well as the first few…

Google Blocks 1.43 Million Malicious Apps, Bans 173,000 Bad Accounts in Google blocked 1.43 million bad apps from being published to the Play Store in 2022 by introducing improved security features and app review processes. This included banning 173,000 bad accounts and preventing over $2 billion in fraudulent and abusive transactions. Google also implemented identity…

APT28 Targets Ukrainian Government Entities with Malicious “Windows Update” Emails CERT-UA has warned of cyberattacks conducted by Russian nation-state hackers targeting Ukrainian government entities. The hackers sent phishing emails impersonating system administrators with fake Microsoft Outlook accounts. CERT-UA is recommending organizations restrict users’ ability to run PowerShell scripts and monitor network connections to the Mocky…

500,000 devices infected by Vietnamese threat actor using ‘malverposting’ tactics A Vietnamese threat actor has been found to be behind a malicious campaign, known as malverposting, that has infected over 500,000 devices worldwide over the past three months. The attack involves the adversary creating business profiles and hijacking popular accounts to serve ads that claim…

Wanted Dead or Alive: Lateral Movement Protection in Real Time Lateral movement is a tactic used by cybercrime organizations and nation-state operators that is now accessible to any ransomware threat actor. It is the process of a compromise of a single endpoint becoming the compromise of additional workstations and servers in the targeted environment, and…

New Decoy Dog Malware Toolkit Discovered: Targeting Enterprise Networks Decoy Dog is a sophisticated malware toolkit that was discovered in early April 2023. It employs evasive techniques such as strategic domain aging and DNS query dribbling, and is rarely used with only 0.0000027% of the 370 million active domains on the internet matching its DNS…

ChatGPT and Other LLMs: How They Work and Where They Could Go Next ChatGPT and Google Bard are AI-powered chatbots that use large language models (LLMs) to take over web searches, generate creative literature, and remember knowledge. LLMs use neural networks to process huge amounts of text data from sources such as Wikipedia, Reddit, and…

Here Comes the Bride, With AI-Generated Wedding Speeches As wedding season approaches, some people are turning to artificial intelligence for help with their hitches. ChatGPT can generate poetic wedding vows, add jokes to toasts, and even help develop ideas for difficult conversations. Joy, a popular wedding-planning website, has an AI tool built on ChatGPT to…

Bing AI SwiftKey comes on Samsung Galaxy devices Microsoft’s Bing AI is now being integrated into SwiftKey, a software keyboard, and will soon be automatically installed on modern Samsung Galaxy devices. This means that users of the One UI Android launcher, which includes the SwiftKey keyboard, will have direct access to Bing AI. Microsoft also…