Security News > 2024 > March

'Thousands' of businesses at mercy of miscreants thanks to unpatched Ray AI flaw
2024-03-27 20:40

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

#AI
Google fixes Chrome zero-days exploited at Pwn2Own 2024
2024-03-27 18:44

Google fixed seven security vulnerabilities in the Chrome web browser on Tuesday, including two zero-days exploited during the Pwn2Own Vancouver 2024 hacking competition. Google fixed the two zero-days in the Google Chrome stable channel, version 123.0.6312.86/.87 for Windows and Mac and 123.0.6312.86 for Linux users, which will roll out worldwide over the coming days.

INC Ransom threatens to leak 3TB of NHS Scotland stolen data
2024-03-27 17:59

The INC Ransom extortion gang is threatening to publish three terabytes of data allegedly stolen after breaching the National Health Service of Scotland. In a post yesterday, the cybercriminals shared multiple images containing medical details and said that they would leak data "Soon," unless the NHS pays a ransom.

CISA tags Microsoft SharePoint RCE bug as actively exploited
2024-03-27 16:24

CISA warns that attackers are now exploiting a Microsoft SharePoint code injection vulnerability that can be chained with a critical privilege escalation flaw for pre-auth remote code execution attacks. These two SharePoint Server security vulnerabilities can be chained by unauthenticated attackers to gain RCE on unpatched servers, as STAR Labs researcher Nguyễn Tiến Giang demonstrated during last year's March 2023 Pwn2Own contest in Vancouver.

Protect Your Business With This Seamless Firewall — Now $150 Off
2024-03-27 16:21

TL;DR: There's no shortage of threats to business out there these days, but DNS FireWall can help protect you from cyberthreats. You can get a great security foundation with DNS FireWall, a security app developed to protect an unlimited number of users from a variety of online threats.

Hiring Kit: Security Analyst
2024-03-27 16:00

In general, security analysts are tasked with identifying weaknesses in current security systems and developing solutions to close security vulnerabilities. The kit includes salary details, a job description, interview questions and a job advert.

Meta accused of snarfing people's Snapchat data via traffic decryption
2024-03-27 15:30

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite
2024-03-27 15:24

Indian government entities and energy companies have been targeted by unknown threat actors with an aim to deliver a modified version of an open-source information stealer malware called...

KuCoin charged with AML violations that let cybercriminals launder billions
2024-03-27 14:08

The U.S. Department of Justice has charged global cryptocurrency exchange KuCoin and two of its founders for failing to adhere to anti-money laundering requirements, allowing threat actors to use the platform to launder money. Founded in 2017 by Chinese citizens Chun Gan and Ke Tang, KuCoin is one of the largest cryptocurrency exchange platforms to buy, sell, trade, and store a variety of digital currencies.

Ransomware as a Service and the Strange Economics of the Dark Web
2024-03-27 14:02

The past three months have seen dramatic developments among the ransomware ecosystem to include the takedown of LockBit's ransomware blog, BlackCat exiting the ecosystem, and the emergence of several smaller ransomware groups. Ransomware as a Service has emerged as the dominant business model among large ransomware groups.