APT41 Spinoff Expands Chinese Actor’s Scope Beyond Asia
Earth Baku, yet another subgroup of the highly active and increasingly sophisticated collective, is moving into EMEA with new malware and living-off-the-land (LOL) tactics.
Microsoft Azure AI Health Bot Infected With Critical Vulnerabilities
Privilege escalation flaws in the healthcare chatbot platform could have allowed unauthorized cross-tenant access and management of other customers’ resources.
CrowdStrike’s Legal Pressures Mount, Could Blaze Path to Liability
Following the July 19 outages caused by a bad update, the cybersecurity firm faces shareholder lawsuits and pressure to pay damages for at least one major customer, Delta Airlines. Will software liability follow?
Memory Safety Is Key to Preventing Hardware Hacks
Spectre and Meltdown exposed just how easy a target computer memory was for attackers. Several efforts are underway to protect memory.
Tackling Vulnerabilities & Errors Head-on for Proactive Security
As attack surfaces increase, partner networks widen, and security teams remain stretched, vulnerabilities and errors continue to be a daunting challenge.
Solar Power Installations Worldwide Open to Cloud API Bugs
The weaknesses gave attackers an avenue to take over millions of photovoltaic devices connected to Solarman and Deye’s cloud-hosted management systems.
Building an Effective Strategy to Manage AI Risks
As AI technologies continue to advance at a rapid pace, privacy, security and governance teams can’t expect to achieve strong AI governance while working in isolation.
The API Security Crisis: Why Your Company Could Be Next
You’re only as strong as your weakest security link.
Chameleon Banking Trojan Makes a Comeback Cloaked as CRM App
The evolving malware is targeting hospitality and other B2C workers in Canada and Europe with capabilities that can evade Android 13 security restrictions.
Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations
Cybersecurity startup LeakSignal, a finalists in this year’s Black Hat USA Startup Spotlight competition, helps organizations see where data is leaking within their environment.