Blog – Page 926 – Cyber Mike

Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code

Cybersecurity researchers have discovered a new malicious Python package that masquerades as a cryptocurrency trading tool but harbors functionality designed to steal sensitive data and drain assets from victims’ crypto wallets.
The package, named “CryptoAITools,” is said to have been distributed via both Python Package Index (PyPI) and bogus GitHub repositories. It was downloaded over 1,300

Back to the Future, Securing Generative AI

While there are similar security challenges that parallel traditional security, we must understand that AI requires new ways to approach security.

The post Back to the Future, Securing Generative AI appeared first on SecurityWeek.

Recent Version of LightSpy iOS Malware Packs Destructive Capabilities

A newer version of the LightSpy malware for iOS includes over a dozen new plugins, many with destructive capabilities.

The post Recent Version of LightSpy iOS Malware Packs Destructive Capabilities appeared first on SecurityWeek.

Embarking on a Compliance Journey? Here’s How Intruder Can Help

Navigating the complexities of compliance frameworks like ISO 27001, SOC 2, or GDPR can be daunting.
Luckily, Intruder simplifies the process by helping you address the key vulnerability management criteria these frameworks demand, making your compliance journey much smoother.
Read on to understand how to meet the requirements of each framework to keep your customer data safe.
How Intruder

Google Patches Critical Chrome Vulnerability Reported by Apple

Google has patched CVE-2024-10487, a critical Chrome vulnerability, and Mozilla has patched high-severity flaws in Firefox.

The post Google Patches Critical Chrome Vulnerability Reported by Apple appeared first on SecurityWeek.

Synology, QNAP, TrueNAS Address Vulnerabilities Exploited at Pwn2Own Ireland

Synology, QNAP and TrueNAS have started patching and mitigating the vulnerabilities exploited recently at Pwn2Own Ireland 2024.

The post Synology, QNAP, TrueNAS Address Vulnerabilities Exploited at Pwn2Own Ireland appeared first on SecurityWeek.

Italian Politicians Express Alarm at Latest Data Breach Allegedly Affecting 800,000 Citizens

Prosecutors say the data of at least 800,000 Italians was compromised in breaches dating from 2022 by a private investigative agency.

The post Italian Politicians Express Alarm at Latest Data Breach Allegedly Affecting 800,000 Citizens appeared first on SecurityWeek.

New Windows Themes zero-day gets free, unofficial patches

Free unofficial patches are now available for a new Windows Themes zero-day vulnerability that allows attackers to steal a target’s NTLM credentials remotely. […]

Massive PSAUX ransomware attack targets 22,000 CyberPanel instances

Over 22,000 CyberPanel instances exposed online to a critical remote code execution (RCE) vulnerability were mass-targeted in a PSAUX ransomware attack that took almost all instances offline. […]

QNAP fixes NAS backup software zero-day exploited at Pwn2Own

QNAP has fixed a critical zero-day vulnerability exploited by security researchers on Thursday to hack a TS-464 NAS device during the Pwn2Own Ireland 2024 competition. […]

Cyber News