Tag: technews

Meet the mastermind behind the Golden Chickens malware, Jack from Romania! The identity of the second threat actor behind the Golden Chickens malware suite has been uncovered, thanks to a fatal operational security blunder. eSentire describes Jack as the true mastermind behind Golden ChickENS. He has taken great pains to obfuscate the software, trying to…

Google AI Writing Assistant Put to the Test Duet is free and has no usage limits, but Google hasn’t determined whether that will be true forever. Over the next few days, I spent a few days testing it in Gmail and Google Docs to speed up wedding planning and uncover its boundaries. When I asked…

Samsung devices under attack! New security flaw found The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of active exploitation of a medium-severity flaw affecting Samsung devices. The issue, tracked as CVE-2023-21492, impacts select Samsung devices running Android versions 11, 12, and 13.ASLR is a security technique that’s designed to thwart memory corruption and…

Cyber Gang FIN7 Returns with New Wave of Attacks The notorious cybercrime group known as FIN7 has been observed deploying Cl0p ransomware, marking the threat actor’s first ransomware campaign since late 2021. Its other ransomware families include Black Basta, DarkSide, REvil, and LockBit. Another notable tactic in its playbook is its pattern of setting up…

Samsung is sticking with Google as its default mobile search engine Samsung has decided to stop using Bing as its default search engine on its mobile web browser. According to a report from The Wall Street Journal, the company paused an internal review of whether the company should replace Google with Bing. Samsung’s Internet Browser,…

How to Avoid Rogue AI Tools Distributing RedLine Malware This is not the first time BATLOADER has used the AI craze to distribute malware. Last week, Trend Micro detailed how the operators behind the BATLOADer campaign used malicious Google search ads to deliver RedLine Stealer malware. According to the report, this vacuum has been exploited…

Developer Alert: Dangerous TurkoRat Malware Found in NPM Packages for Node This security update discusses two malicious packages discovered in the npm package repository. One of them, nodejs-encrypt-agent, was found to contain an open source trojan called TurkoRat along with a dependency named axios-proxy. This trojan was also found to masquerading as another legitimate npm…

Active Directory vs. Exposed Attack Surface: Who’ll Win This Fight? The common practice of syncing passwords between AD and the cloud identity provider means any AD breach is a potential risk to the SaaS environment as well. To learn more about how Silverfort addresses weaknesses in your identity security posture, check out our resource, Silverfort…

Google to Phase Out Third-Party Cookies Starting in 2024 Google officially flips the switch on its Privacy Sandbox initiatives and says it’s going to start phasing out third-party cookies in Chrome browser starting in the first quarter of 2024. That’ll be about a year later. Google says it’ll eventually turn off support for these cookies…

The Suspicious Candy Truck for ChatGPT: Is ChatGPT the First Back ChatGPT, an AI language model developed by OpenAI, is a kind of backdoor attack on RL fine-tuning in natural language processing. In other words, someone has managed to reverse-engineer the way neural networks are trained and fed data to improve their performance in an…