This month, MITER will add to its ATT&CK database two sub-techniques that have been widely exploited by North Korean threat actors. THE first, not entirely new, sub-technique involves manipulation of…
Category: Cyber Security
The critical rust flaw poses an exploitation threat in specific Windows use cases
The Rust project has released an update to its standard library, after a vulnerability researcher discovered that a specific function used to execute batch files on Windows systems could be…
Knostic Raises $3.3M for Enterprise GenAI Access Control
PRESS RELEASE RESTON, Virginia and TEL AVIV, Israel, April 11, 2024/PRNewswire-PRWeb/ — Knostic, the world’s first provider of access controls needed for generative AI, emerges from the shadows today, having…
Sisense password breach triggers ‘disturbing’ CISA alert.
While details are still emerging, the US federal government has issued a password compromise warning to customers of business analytics platform Sisense and encouraged immediate recovery. The Cybersecurity and Infrastructure…
Cohesity Extends Collaboration to Strengthen Cyber Resilience with IBM Investment in Cohesity
PRESS RELEASE SAN JOSE, California – April 11, 2024 – Cohesity today announced a deepening of its cyber resilience collaboration with IBM. The enhanced relationship will accelerate the development of…
Expired Redis service abused to use Metasploit Meterpreter maliciously
The attackers use an 8 year old version Redis open source database server maliciously use Metasploit’s Meterpreter module to expose exploits within a system, potentially allowing the acquisition and distribution…
Zambia arrests 77 people involved in China-backed cybercrime Op
Law enforcement in Zambia this week raided a Chinese company that was hiring unsuspecting young Zambian citizens supposedly for positions at a call center that was actually a front for…
Why MLBOMs are useful for securing the AI/ML supply chain
COMMENT The days of large, monolithic apps are fading. Today’s applications rely on microservices and code reuse, which simplifies development but creates complexity when it comes to monitoring and managing…
Python’s PyPI reveals its secrets
April 11, 2024News about hackersSoftware security/programming GitGuardian is famous for its annual State of Secrets Sprawl report. In their 2023 report, they found over 10 million passwords, API keys, and…
An ambitious training initiative that exploits the talents of the blind and visually impaired
When David Mayne started looking for a job in cybersecurity, the recruiter at his first-choice company told him no. With only one eye, how could Mayne spend all day staring…