Security News

AI weaponization becomes a hot topic on underground forums
2024-03-28 04:30

Threat actors automate attacks with AI. The use of AI to accelerate these attacks is gaining significant attention among major cybercriminal forums with growing interest in weaponizing this technology. AI systems can now replicate a voice using a sample, and video-call deepfakes are aiding threat actors.

#AI
China encouraged armed offensive against Myanmar government to protest proliferation of online scams
2024-03-28 04:28

The military junta controlling Myanmar has struggled to control all of its territory thanks in part to China backing rebel forces as a way of expressing its displeasure about cyberscam centers operating from the country. One issue Beijing wanted the junta to address was the proliferation of scam centers in Myanmar, as they often prey on Chinese netizens.

Cybercriminals use cheap and simple infostealers to exfiltrate data
2024-03-28 04:00

Of these compromised identity records, one in four contained information about the user's network or physical location, putting the individual's identity, platforms they have access to, and physical well-being at risk. Taking a deeper look into how stolen data empowers bad actors to perpetrate cybercrimes including account takeover, fraud, and ransomware, researchers analyzed the exposures of the average digital identity being traded in the criminal underground and found that the average identity appears in as many as nine breaches and is associated with 15 breach records.

New Darcula phishing service targets iPhone users via iMessage
2024-03-27 22:12

One thing that makes the service stand out is that it approaches the targets using the Rich Communication Services protocol for Google Messages and iMessage instead of SMS for sending phishing messages. "The Darcula platform has been used for numerous high-profile phishing attacks over the last year, including messages received on both Apple and Android devices in the UK, as well as package scams impersonating United States Postal Service highlighted in numerous posts on Reddit's /r/phishing." - Netcraft.

Apple fans deluged with phony password reset requests
2024-03-27 22:06

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Majority of Americans now use ad blockers
2024-03-27 21:26

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Windows 11 22H2 Home and Pro get preview updates until June 26
2024-03-27 20:44

Microsoft reminded customers today that the Windows 11 22H2 Home and Pro editions will continue to receive non-security preview updates until June 26. According to the new schedule, the preview updates for Windows 11 22H2 will keep rolling out for Home and Pro users until late June.

'Thousands' of businesses at mercy of miscreants thanks to unpatched Ray AI flaw
2024-03-27 20:40

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

#AI
Google fixes Chrome zero-days exploited at Pwn2Own 2024
2024-03-27 18:44

Google fixed seven security vulnerabilities in the Chrome web browser on Tuesday, including two zero-days exploited during the Pwn2Own Vancouver 2024 hacking competition. Google fixed the two zero-days in the Google Chrome stable channel, version 123.0.6312.86/.87 for Windows and Mac and 123.0.6312.86 for Linux users, which will roll out worldwide over the coming days.

INC Ransom threatens to leak 3TB of NHS Scotland stolen data
2024-03-27 17:59

The INC Ransom extortion gang is threatening to publish three terabytes of data allegedly stolen after breaching the National Health Service of Scotland. In a post yesterday, the cybercriminals shared multiple images containing medical details and said that they would leak data "Soon," unless the NHS pays a ransom.