School Kid Uploads Ransomware Scripts to PyPI Repository as ‘Fun’ Project
An apparently school-age hacker based in Verona, Italy, has become the latest to demonstrate why developers need to pay close attention to what they download from public code repositories...
Critical RCE Bug in DrayTek Routers Opens SMBs to Zero-Click Attacks
A critical, pre-authenticated remote code execution (RCE) vulnerability has cropped up in the widely used line of DrayTek Vigor routers for smaller businesses. If it's exploited, researchers warn that it...
Large Language AI Models Have Real Security Benefits
GPT-3, the large neural network created with extensive training using massive datasets, provides a variety of benefits to cybersecurity applications, including natural-language-based threat hunting, easier categorization of unwanted content,...
Thousands of Mobile Apps Leaking Twitter API Keys
Thousands of mobile apps are leaking Twitter API keys — some of which give adversaries a way to access or take over the Twitter accounts of users of these...
Microsoft Intros New Attack Surface Management, Threat Intel Tools
Microsoft announced two new capabilities to its Defender security tools — threat intelligence and external attack surface management.
With Microsoft Defender Threat Intelligence, security teams will have additional context, insights,...
Chromium Browsers Allow Data Exfiltration via Bookmark Syncing
Bookmark synchronization has become a standard feature in modern browsers: It gives Internet users a way to ensure that the changes they make to bookmarks on a single device...
Ransomware Hit on European Pipeline & Energy Supplier Encevo Linked to BlackCat
Following a July 25 announcement that its subsidiaries had been breached in a ransomware attack, Encevo, an energy supplier based in Luxembourg, followed up a few days later with...
ICYMI: Dark Web Happenings Edition With Evil Corp., MSP Targeting & More
Being a cybersecurity-focused news team is a busy business, and we can't always bring you all the news that's fit to print in a given week. That's why we've...
Big Questions Remain Around Massive Shanghai Police Data Breach
Questions continue to swirl around a June 30 incident where an unknown individual put up for sale on a popular underground forum a staggering 23TB of personally identifiable information...
Why Bug-Bounty Programs Are Failing Everyone
It's been about a decade since the hype for bug-bounty programs first started going supernova, but the jury is still out on the effectiveness of them. According to Katie...
