Security News

LockBit ransomware affiliate gets four years in jail, to pay $860k
2024-03-13 11:42

Russian-Canadian cybercriminal Mikhail Vasiliev has been sentenced to four years in prison by an Ontario court for his involvement in the LockBit ransomware operation. The man was a key member of the notorious LockBit ransomware gang, involved in many of the operation's high-profile attacks.

Burglars Using Wi-Fi Jammers to Disable Security Cameras
2024-03-13 11:07

The arms race continues, as burglars are learning how to use jammers to disable Wi-Fi security cameras. Jan Doggen March 13, 2024 7:26 AM. "This content is not available in your country/region."Lazy US companies who think it is too much trouble to comply with EU cookie legislation.

Join Our Webinar on Protecting Human and Non-Human Identities in SaaS Platforms
2024-03-13 10:33

Identities are the latest sweet spot for cybercriminals, now heavily targeting SaaS applications that are especially vulnerable in this attack vector. The use of SaaS applications involves a wide...

Researchers Highlight Google's Gemini AI Susceptibility to LLM Threats
2024-03-13 10:14

Google's Gemini large language model (LLM) is susceptible to security threats that could cause it to divulge system prompts, generate harmful content, and carry out indirect injection attacks. The...

Alert: Cybercriminals Deploying VCURMS and STRRAT Trojans via AWS and GitHub
2024-03-13 09:43

A new phishing campaign has been observed delivering remote access trojans (RAT) such as VCURMS and STRRAT by means of a malicious Java-based downloader. “The attackers stored malware on public...

Reducing the cloud security overhead
2024-03-13 08:51

"As the digital horizon expands, security, cloud and ops teams have to redefine their role, not just as protectors, but as architects of a new era, where cloud adoption and success are inseparable companions to help embed digital trust into cloud initiatives," he says. "In the early stages of public cloud adoption, we supported lots of organizations struggling to build the right security posture in their cloud landing zone," Singh recalls.

Whizkids jimmy OpenAI, Google's closed models
2024-03-13 08:34

Boffins have managed to pry open closed AI services from OpenAI and Google with an attack that recovers an otherwise hidden portion of transformer models. "We thereby confirm, for the first time, that these black-box models have a hidden dimension of 1024 and 2048, respectively. We also recover the exact hidden dimension size of the gpt-3.5-turbo model, and estimate it would cost under $2,000 in queries to recover the entire projection matrix."

LastPass’ CIO vision for driving business strategy, innovation
2024-03-13 06:00

Recently, LastPass appointed Asad Siddiqui as its CIO. He brings over two decades of experience leading startups and large technology organizations. A top challenge for CIOs is cybersecurity and privacy, ensuring that we keep ahead of bad actors as they continue to adjust their attack methods and protect vast amounts of data while adhering to strict privacy regulations such as GDPR and CCPA. In addition to cybersecurity, AI, data management, and governance, we are driving digital transformation and innovation, controlling SaaS sprawl and spending, and recruiting and retaining skilled IT professionals, all of which present significant challenges for CIOs.

Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper-V Flaws
2024-03-13 05:38

Microsoft on Tuesday released its monthly security update, addressing 61 different security flaws spanning its software, including two critical issues impacting Windows Hyper-V that could lead to...

BSAM: Open-source methodology for Bluetooth security assessment
2024-03-13 05:30

Many wireless headsets using Bluetooth technology have vulnerabilities that may allow malicious individuals to covertly listen in on private conversations, Tarlogic Security researchers have demonstrated last week at RootedCON in Madrid. "Many of the examples presented during the conference were real tests on devices that attendees - most of them cybersecurity experts - were carrying with them," they told Help Net Security.