Security News
![CISA: Russian hackers target TeamCity servers since September](/static/build/img/news/cisa-russian-hackers-target-teamcity-servers-since-september-small.jpg)
CISA and partner cybersecurity agencies and intelligence services warned that the APT29 hacking group linked to Russia's Foreign Intelligence Service has been targeting unpatched TeamCity servers in widespread attacks since September 2023. Security researchers at nonprofit internet security outfit Shadowserver Foundation are tracking almost 800 unpatched TeamCity servers that are vulnerable to attacks.
![Hackers are exploiting critical Apache Struts flaw using public PoC](/static/build/img/news/hackers-are-exploiting-critical-apache-struts-flaw-using-public-poc-small.jpg)
Hackers are attempting to leverage a recently fixed critical vulnerability in Apache Struts that leads to remote code execution, in attacks that rely on publicly available proof-of-concept exploit code. Apache Struts is an open-source web application framework designed to streamline the development of Java EE web apps, offering a form-based interface and extensive integration capabilities.
![Google Adds Gemini Pro API to AI Studio and Vertex AI](/static/build/img/news/google-adds-gemini-pro-api-to-ai-studio-and-vertex-ai-small.jpg)
Starting Dec. 13, developers can use Google AI Studio and Vertex AI to build applications with the Gemini Pro API, which allows access to Google's new generative AI model. Google's initial rollout of Gemini was limited to Google Bard and the Pixel 8 Pro, so Wednesday's general availability of Gemini for Google AI Studio and Vertex AI marks the first test of Gemini for enterprise developers.
![How to Use Google’s Titan Security Keys With Passkey Support](/static/build/img/news/alt/hackers-statistics-small.jpg)
Google announced the availability of Titan Security Keys with passkey support in mid-November 2023; the initial Titan Security Keys edition was used solely for multifactor authentication. Titan Security Keys can serve as a passkey to replace password entry.
![BazaCall Phishing Scammers Now Leveraging Google Forms for Deception](/static/build/img/news/bazacall-phishing-scammers-now-leveraging-google-forms-for-deception-small.jpg)
The threat actors behind the BazaCall call back phishing attacks have been observed leveraging Google Forms to lend the scheme a veneer of credibility. The method is an "attempt to elevate the...
![Learning the safety language of the cloud](/static/build/img/news/learning-the-safety-language-of-the-cloud-small.jpg)
See multiple layering of clouds in a blue sky can mean you are in line to receive eternal happiness. If only that was true in the complex world of IT, where multi-cloud compute environments are rapidly becoming the norm.
![Attackers abuse OAuth apps to initiate large-scale cryptomining and spam campaigns](/static/build/img/news/attackers-abuse-oauth-apps-to-initiate-large-scale-cryptomining-and-spam-campaigns-small.jpg)
Attackers are compromising high-privilege Microsoft accounts and abusing OAuth applications to launch a variety of financially-motivated attacks. Microsoft Threat Intelligence has observed a number of attacks that started with attackers compromising poorly secured accounts that have permissions to create, modify, and grant high privileges to OAuth applications.
![Google Using Clang Sanitizers to Protect Android Against Cellular Baseband Vulnerabilities](/static/build/img/news/google-using-clang-sanitizers-to-protect-android-against-cellular-baseband-vulnerabilities-small.jpg)
Google is highlighting the role played by Clang sanitizers in hardening the security of the cellular baseband in the Android operating system and preventing specific kinds of vulnerabilities. This...
![Surveillance by the US Postal Service](/static/build/img/news/alt/Geopolitical-Cybersecurity-Predictions-2-small.jpg)
This is not about mass surveillance of mail, this is about sorts of targeted surveillance the US Postal Inspection Service uses to catch mail thieves: To track down an alleged mail thief, a US...
![How to Analyze Malware’s Network Traffic in A Sandbox](/static/build/img/news/how-to-analyze-malwares-network-traffic-in-a-sandbox-small.jpg)
Malware analysis encompasses a broad range of activities, including examining the malware's network traffic. To be effective at it, it's crucial to understand the common challenges and how to...