COMMENT 2024 is shaping up to be a landscape of unprecedented volatility in cybersecurity. With regulatory changes, third-party service incidents and economic uncertainties looming, the need for board involvement in…
Category: Cyber Security
10 Steps to Eradicate Terrapin Vulnerability
New vulnerabilities emerge into the spotlight almost every day, capturing the public’s attention for a fleeting moment before the next sinister incident occurs. This time, the Terrapin vulnerability takes center…
3 strategies for future-proof data privacy
COMMENT In 2023, important data privacy regulations and laws have developed at the federal, state, and international levels. The US Federal Trade Commission has taken a comprehensive approach to safeguarding…
LLM’s pervasive hallucinations expand code developers’ attack surface
The use of large language models (LLMs) by software developers gives attackers a greater opportunity than previously thought to deploy malicious packages into development environments, according to recently published research.…
New ZenHammer attack bypasses RowHammer defenses on AMD CPUs
March 28, 2024PressroomHardware security/vulnerabilities Cybersecurity researchers at ETH Zurich have developed a new variant of the RowHammer DRAM (dynamic random access memory) attack that, for the first time, works successfully…
Cisco IOS bugs enable remote, unauthenticated DoS attacks
Cisco has released security updates for its flagship IOS and IOS XE operating system software for network devices, as well as patches for its Access Point software. That of the…
Finland blames Chinese hacking group APT31 for cyberattack on Parliament
March 28, 2024PressroomCyber espionage/Malware Finnish police (also known as Poliisi) have formally charged a Chinese state actor identified as APT31 with orchestrating a cyberattack against the country’s Parliament in 2020.…
The United States places a $10 million bounty on members of the BlackCat ransomware gang
The US State Department has announced that it will offer a reward of $10 million for information that can help law enforcement track down anyone who, on behalf of another…
Linux version of DinodasRAT spotted in cyber attacks in several countries
March 28, 2024PressroomLinux/Network Security A Linux version of a cross-platform backdoor called DinodasRAT has been detected in the wild against China, Taiwan, Turkey and Uzbekistan, new Kaspersky findings reveal. DinodasRAT,…
Indian Government and Oil Companies Hacked by ‘HackBrowserData’
Indian government agencies and energy companies are facing a new threat in the form of spy campaign using an open source information thief. “HackBrowersData”, a modified file information thief, can…