An XZ Utils vulnerability allowed the embedding of malicious code in the libraries for XZ Utils versions 5.6.0 and 5.6.1. XZ Utils is data compression software that is present in several Linux distributions. The resulting build interferes with authentication in sshd via systemd.
As more users adopt multi-factor authentication (MFA) for account security, threat actors increase efforts to bypass this security measure. They often use phishing emails to gather login details for online accounts and phishing kits to increase the effectiveness of these campaigns.
Search Generative Experience (SGE) is Google’s upcoming generative artificial intelligence (AI) search feature. Google first allowed users to opt into the Google SGE results in May 2023. Google began rolling out this feature to a small sample of random users who have not yet opted in.
Threat actors use SMS texts in phishing campaigns to steal users’ personal data, funds, etc. SMS-based phishing (SMiShing) may be more effective than email phishing as these messages are viewed on a mobile device, making it difficult to identify malicious texts.
With Tax Day quickly approaching, many taxpayers may feel stressed as they work to file their tax returns promptly and accurately. During this time, cybercriminals may exploit this human vulnerability and leverage the rapid advancement and increase in artificial intelligence and deepfakes.
Threat actors are using HTML smuggling and fraudulent Google Sites pages to disseminate AZORult in a new malware campaign. AZORult, dubbed PuffStealer and Ruzalto, was first detected in 2016. It searches the desktop for sensitive documents using keywords...
This provides an overview for executive leaders on the urgent risk posed by People’s Republic of China (PRC) state-sponsored cyber actors known as Volt Typhoon. Volt Typhoon has been pre-positioning themselves on US critical infrastructure organizations’ networks.
Malicious copies of popular apps have been discovered on the Apple App Store. These apps are designed to be mistaken for legitimate apps and conduct malicious activity, such as stealing login credentials and other sensitive information. Click to learn more.
Third-party vendors used by businesses and organizations continue to be targets of threat actors to conduct cyberattacks. These providers may serve as an entry point for threat actors to target multiple organizations with social engineering campaigns.
Over one hundred malicious artificial intelligence (AI) machine learning (ML) models have been discovered on the Hugging Face platform, a popular public AI model repository allowing users to create interactive in-browser demonstrations. Click to learn more about malware concerns.
