BleepingComputer (2 hours ago)
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1.
Read the full story on BleepingComputer.
The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks.
North Korean hackers may be using AI to plan and carry out cryptocurrency thefts, according to security experts cited in a Bloomberg report published on Monday. They point to the growing complexity and precision of recent attacks, including last week’s record theft from Binance.
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain controller.
Ford said it’s making an “explicit commitment” to its customers that “their vehicle data is safe” with the company.
A second cyberattack has struck supermarket freezers across Europe.
The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record.
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux’s development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise.
OpenAI has just confirmed that it’s rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across ChatGPT and Codex.
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys.
71 active sources
26 Turkish · 45 English
All sources
