Page 55

[ad_1] Security researchers have uncovered a new design flaw in the Google Workspace Domain-Wide Delegation feature.  Named “DeleFriend” by Hunters’ Team Axon, the vulnerability could potentially expose Google Workspace to unauthorized access and privilege escalation in its APIs. According to an advisory published by the team on Tuesday,... Continue reading

[ad_1] Threat actors have been observed exploiting a critical vulnerability, CVE-2023-46604, in Apache systems.  Over the past few weeks, Fortiguard Labs identified multiple threat actors leveraging this vulnerability to unleash several malware strains. Among the discoveries is the emergence of a newly discovered Golang-based botnet named... Continue reading

[ad_1] A worrying 17% of the UK’s small and medium-sized businesses (SMBs) can’t always spot the tell-tale signs of online fraud and scams, according to new data from UK Finance. The banking industry body has been running its “Can you spot fraud?” quiz for small... Continue reading

[ad_1] US consumers were deluged with an estimated two billion spam and scam calls last month, according to new data from Truecaller. The Swedish provider of caller ID and call blocking services revealed the data as part of its new Monthly US Spam and Scam... Continue reading

[ad_1] Threat actors undertaking identity fraud have been using deepfakes ten times more in 2023 than in 2022, according to digital identity verification solutions provider Sumsub. In its third annual Identity Fraud Report, published on November 28, 2023, Sumsub found that artificial intelligence-powered techniques were... Continue reading

[ad_1] Ardent Health Services and its affiliated entities discovered a cybersecurity incident on the morning of November 23 2023, confirming it to be a ransomware attack.  In a data security update on Monday, the firm said its technology team responded by taking the network offline and... Continue reading

[ad_1] Security researchers have uncovered the continuation and expansion of an Android mobile banking Trojan campaign targeting major Iranian banks.  Initially discovered in July 2023, the campaign has not only persisted but has also evolved with enhanced capabilities, according to a new report by Zimperium... Continue reading

[ad_1] Cybercriminals are so far reluctant to use generative AI to launch attacks, according to new research by Sophos. Examining four prominent dark-web forums for discussions related to large language models (LLMs), the firm found that threat actors showed little interest in using these tools,... Continue reading

[ad_1] A prolific threat actor has been spotted on the dark web selling what they claim to be sensitive information stolen from General Electric. General Electric (GE) is one of America’s best-known multinationals, having been founded over 100 years ago by Thomas Edison. It now... Continue reading