Month: May 2024

May 13, 2024The Hacker NewsBrowser Security / Data Protection With the browser becoming the most prevalent workspace in the enterprise, it is also turning into a popular attack vector for cyber attackers. From account takeovers to malicious extensions to phishing attacks, the browser is a means for stealing sensitive data and accessing organizational systems. Security
0 Comments
May 13, 2024Newsroom The MITRE Corporation has officially made available a new threat-modeling framework called EMB3D for makers of embedded devices used in critical infrastructure environments. “The model provides a cultivated knowledge base of cyber threats to embedded devices, providing a common understanding of these threats with the security mechanisms required to mitigate them,” the
0 Comments
Airtel and Google Cloud have collaborated to build and deploy artificial intelligence (AI)-powered cloud services for enterprises in the Indian market. Through this partnership, Airtel aims to use Google’s cloud solution suite and build server-based services including various analytics tools, IoT products, and more. The telecom operator also plans to integrate the cloud-based AI capabilities
0 Comments
May 13, 2024NewsroomSoftware Security / Malware Cybersecurity researchers have identified a malicious Python package that purports to be an offshoot of the popular requests library and has been found concealing a Golang-version of the Sliver command-and-control (C2) framework within a PNG image of the project’s logo. The package employing this steganographic trickery is requests-darwin-lite, which
0 Comments
India will again delay caps on market share for a popular digital payments method, two sources told Reuters, benefiting Google Pay and Walmart-backed PhonePe as the authorities prioritise growth over concerns about market concentration. The National Payments Corporation of India (NPCI), the quasi-regulator, will extend by as much as two years a year-end deadline to
0 Comments
May 10, 2024NewsroomVulnerability / Cloud Security Cybersecurity researchers have discovered a novel attack that employs stolen cloud credentials to target cloud-hosted large language model (LLM) services with the goal of selling access to other threat actors. The attack technique has been codenamed LLMjacking by the Sysdig Threat Research Team. “Once initial access was obtained, they
0 Comments