brangberg – Page 1304

Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense

Google has announced that it will be switching from KYBER to ML-KEM in its Chrome web browser as part of its ongoing efforts to defend against the risk posed by cryptographically relevant quantum computers (CRQCs).
“Chrome will offer a key share prediction for hybrid ML-KEM (codepoint 0x11EC),” David Adrian, David Benjamin, Bob Beck, and Devon O’Brien of the Chrome Team said. “The

U.S. Treasury Sanctions Executives Linked to Intellexa Predator Spyware Operation

The U.S. Department of Treasury has imposed fresh sanctions against five executives and one entity with ties to the Intellexa Consortium for their role in the development, operation, and distribution of a commercial spyware called Predator.
“The United States will not tolerate the reckless propagation of disruptive technologies that threatens our national security and undermines the privacy and

Dependency Confusion Could Have Led to RCE in Google Cloud Platform

Tenable shares details on a dependency confusion attack that led to the execution of code on Google’s internal servers.

The post Dependency Confusion Could Have Led to RCE in Google Cloud Platform appeared first on SecurityWeek.

BlackCloak Raises $17 Million to Protect Executives, High-Profile Individuals

BlackCloak has raised $17 million in Series B funding to protect high-profile individuals from sophisticated cyberattacks.

The post BlackCloak Raises $17 Million to Protect Executives, High-Profile Individuals appeared first on SecurityWeek.

Element Security Emerges From Stealth With CTEM Solution, $5M in Funding

Israeli startup Element Security has emerged from stealth with $5 million in funding and a Continuous Threat Exposure Management (CTEM) solution.

The post Element Security Emerges From Stealth With CTEM Solution, $5M in Funding appeared first on SecurityWeek.

How to Investigate ChatGPT activity in Google Workspace

Since launching ChatGPT in 2022, OpenAI has defied expectations with a steady stream of product announcements and enhancements. One such announcement came on May 16, 2024, and for most consumers, it probably felt innocuous. Titled “Improvements to data analysis in ChatGPT,” the post outlines how users can add files directly from Google Drive and Microsoft OneDrive. It’s worth mentioning

DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military

Chinese national Song Wu allegedly sent spear-phishing emails to NASA, Air Force, Navy, Army, and FAA employees.

The post DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military appeared first on SecurityWeek.

Over 1,000 ServiceNow instances found leaking corporate KB data

Over 1,000 misconfigured ServiceNow enterprise instances were found exposing Knowledge Base (KB) articles that contained sensitive corporate information to external users and potential threat actors. […]

Recent WhatsUp Gold Vulnerabilities Possibly Exploited in Ransomware Attacks

Two recently patched Progress Software WhatsUp Gold vulnerabilities may have been exploited in the wild, possibly in ransomware attacks.

The post Recent WhatsUp Gold Vulnerabilities Possibly Exploited in Ransomware Attacks appeared first on SecurityWeek.

Binance Warns of Rising Clipper Malware Attacks Targeting Cryptocurrency Users

Cryptocurrency exchange Binance is warning of an “ongoing” global threat that’s targeting cryptocurrency users with clipper malware with the goal of facilitating financial fraud.
Clipper malware, also called ClipBankers, is a type of malware that Microsoft calls cryware, which comes with capabilities to monitor a victim’s clipboard activity and steal sensitive data a user copies, including

Author: brangberg