Security News
![Bitwarden vs 1Password (2024): Password Manager Comparison](/static/build/img/news/alt/ransomware-statistic-small.jpg)
Bitwarden and 1Password are two of the top password managers. Find out which password manager is the best for you using this comprehensive comparison.
![Experts Detail Multi-Million Dollar Licensing Model of Predator Spyware](/static/build/img/news/experts-detail-multi-million-dollar-licensing-model-of-predator-spyware-small.jpg)
A new analysis of the sophisticated commercial spyware called Predator has revealed that its ability to persist between reboots is offered as an "add-on feature" and that it depends on the...
![OpenAI rolls out imperfect fix for ChatGPT data leak flaw](/static/build/img/news/openai-rolls-out-imperfect-fix-for-chatgpt-data-leak-flaw-small.jpg)
OpenAI has mitigated a data exfiltration bug in ChatGPT that could potentially leak conversation details to an external URL. According to the researcher who discovered the flaw, the mitigation isn't perfect, so attackers can still exploit it under certain conditions. Security researcher Johann Rehberger discovered a technique to exfiltrate data from ChatGPT and reported it to OpenAI in April 2023.
![Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication](/static/build/img/news/chameleon-android-banking-trojan-variant-bypasses-biometric-authentication-small.jpg)
Cybersecurity researchers have discovered an updated version of an Android banking malware called Chameleon that has expanded its targeting to include users in the U.K. and Italy. "Representing a...
![BidenCash darkweb market gives 1.9 million credit cards for free](/static/build/img/news/bidencash-darkweb-market-gives-1-9-million-credit-cards-for-free-small.jpg)
The BidenCash stolen credit card marketplace is giving away 1.9 million credit cards for free via its store to promote itself among cybercriminals. BidenCash launched in early 2022 as a new marketplace on both the dark web and the clearnet, selling credit and debit cards that were stolen through phishing or skimmers on e-commerce sites.
![Third-Party Supply Chain Risk a Challenge for Cyber Security Professionals in Australia](/static/build/img/news/alt/cybercrime-statistics-small.jpg)
Third-party supply chain risk is a key concern from Australian cyber security professionals. ASIC reveals third-party supply chain risk as key gap in Australia.
![Four in five Apache Struts 2 downloads are for versions featuring critical flaw](/static/build/img/news/four-in-five-apache-struts-2-downloads-are-for-versions-featuring-critical-flaw-small.jpg)
Security vendor Sonatype believes developers are failing to address the critical remote code execution vulnerability in the Apache Struts 2 framework, based on recent downloads of the code. It is a logic bug in the framework's file upload feature: if an application uses Struts 2 to allow users to upload files to a server, those folks can abuse the vulnerability to save documents where they shouldn't be allowed to on that remote machine.
![New JavaScript Malware Targeted 50,000+ Users at Dozens of Banks Worldwide](/static/build/img/news/new-javascript-malware-targeted-50000-users-at-dozens-of-banks-worldwide-small.jpg)
A new piece of JavaScript malware has been observed attempting to steal users' online banking account credentials as part of a campaign that has targeted more than 40 financial institutions across...
![Cyberattack on Ukraine’s Kyivstar Seems to Be Russian Hacktivists](/static/build/img/news/alt/ransomware-statistics-small.jpg)
The Solntsepek group has taken credit for the attack. They're linked to the Russian military, so it's unclear whether the attack was government directed or freelance.
![Mozilla decides Trusted Types is a worthy security feature](/static/build/img/news/mozilla-decides-trusted-types-is-a-worthy-security-feature-small.jpg)
Mozilla last week revised its position on a web security technology called Trusted Types, which it has decided to implement in its Firefox browser. Trusted Types addresses the risk of unsafe input by limiting the attack surface via Content Security Policy and a content filtering mechanism.