Latest Cybersecurity News and Articles

---

PixPirate Android Banking Trojan Using New Evasion Tactic to Target Brazilian Users

The threat actors behind the PixPirate Android banking trojan are leveraging a new trick to evade detection on compromised devices and harvest sensitive information from users in Brazil. The approach allows it to hide the malicious app’s icon from the home screen of the victim’s device, IBM said in a technical report published today. “Thanks to this new technique, during PixPirate reconnaissance

---

Eye Security Raises $39 Million in Series B Funding

The investment was led by JPMorgan Chase’s growth equity investment arm, with the participation of Bessemer Venture Partners and TIN Capital. Established in 2020, Eye Security offers enterprise-level cybersecurity services to midsize businesses.

---

New Attack Reveals the Inner Workings of OpenAI's and Google's Closed Models

This attack has been able to extract the entire projection matrix of OpenAI's language models for a cost ranging from a few dollars to several thousand, depending on the model's size and the number of queries.

---

DARPA Picks Seven Small Businesses for AI Cyber Challenge

The Defense Advanced Research Projects Agency (DARPA) has awarded seven small businesses contracts worth $1 million each to develop a cyber reasoning system using artificial intelligence (AI).

---

New Cloud Attack Targets Crypto CDN Meson Ahead of Launch

A malicious campaign has been identified by the Sysdig Threat Research Team, targeting the blockchain-based Meson service in anticipation of the crypto token unlock scheduled for March 15.

---

Image-Based Phishing Tactics Evolve

Despite high confidence in current security measures, 76% of organizations were still compromised by image-based and QR code phishing attacks in the last year, according to IRONSCALES and Osterman Research.

---

Acer Confirms Philippines Employee Data Leaked on Hacking Forum

The attacker, known as 'ph1ns', leaked the stolen database on a hacking forum. Acer acknowledged the breach and stated that the compromised data was not acquired directly from their systems.

---

First-Ever South Korean National Detained for Espionage in Russia

Russian authorities have detained a South Korean national named Baek Won-soon on cyber espionage charges, marking the first instance of a Korean citizen being involved in such allegations.

---

Update: LockBit Takes Credit for February Shutdown of South African Pension Fund

The attack on the largest pension fund in Africa has disrupted operations and pension payments for about 1.7 million government employees, pensioners, and their dependents.

---

Join Our Webinar on Protecting Human and Non-Human Identities in SaaS Platforms

Identities are the latest sweet spot for cybercriminals, now heavily targeting SaaS applications that are especially vulnerable in this attack vector. The use of SaaS applications involves a wide range of identities, including human and non-human, such as service accounts, API keys, and OAuth authorizations. Consequently, any identity in a SaaS app can create an opening for cybercriminals to

---

Italian Data Regulator Launches Probe Into OpenAI's Sora

European regulators, including those in Germany, France, Spain, and Poland, are scrutinizing OpenAI's privacy practices, coinciding with the upcoming implementation of the AI Act in the EU.

---

Anti-Fraud Project Boosts Security of African, Asian Financial Systems

The Tazama open source project provides real-time anti-fraud capabilities for smaller financial institutions and government agencies in Africa, Asia, and the Middle East, addressing the vulnerability of their financial systems to fraud.

---

Researchers Highlight Google's Gemini AI Susceptibility to LLM Threats

Google's Gemini large language model (LLM) is susceptible to security threats that could cause it to divulge system prompts, generate harmful content, and carry out indirect injection attacks. The findings come from HiddenLayer, which said the issues impact consumers using Gemini Advanced with Google Workspace as well as companies using the LLM API. The first vulnerability involves

---

Report: Over 12 Million Auth Secrets and Keys Leaked on GitHub in 2023

The "leakiest" countries in 2023 were India, the United States, Brazil, China, and others. The IT sector was the most affected, accounting for 65.9% of leaked secrets, followed by education at 20.1%, and other sectors making up the remaining 14%.

---

Alert: Cybercriminals Deploying VCURMS and STRRAT Trojans via AWS and GitHub

A new phishing campaign has been observed delivering remote access trojans (RAT) such as VCURMS and STRRAT by means of a malicious Java-based downloader. “The attackers stored malware on public services like Amazon Web Services (AWS) and GitHub, employing a commercial protector to avoid detection of the malware,” Fortinet FortiGuard Labs researcher Yurren Wan said. An unusual aspect of the

---

Microsoft March 2024 Patch Tuesday Fixes 60 Flaws, 18 RCE Bugs

The list covers a wide range of Microsoft products including Hyper-V, Azure Data Studio, Microsoft Edge, Microsoft Office, Microsoft Teams for Android, Windows Kernel, and many more.

---

Update: Stanford Says Data From 27,000 People Leaked in September Ransomware Attack

The breach specifically targeted the Department of Public Safety's network, resulting in the potential exposure of sensitive data such as Social Security numbers, driver's license numbers, and other personal information collected by the department.

---

Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper-V Flaws

Microsoft on Tuesday released its monthly security update, addressing 61 different security flaws spanning its software, including two critical issues impacting Windows Hyper-V that could lead to denial-of-service (DoS) and remote code execution. Of the 61 vulnerabilities, two are rated Critical, 58 are rated Important, and one is rated Low in severity. None of the flaws are listed as

---

How an infamous ransomware gang found itself hacked – podcast

LockBit was a sophisticated criminal operation, offering the tools needed to steal a company’s data and hold it to ransom. Then it was itself hacked. Alex Hern reportsA ransomware site on the dark web has allowed criminals to extort hospitals, businesses and schools for years. By encrypting data or threatening to post data online, hackers have cost companies millions of pounds.It’s called LockBit, and it was very successful until one day last month when hackers who logged on to the site found it had been hacked by authorities including the UK National Crime Agency and the FBI. These agencies announced they were in control of LockBit’s site, marking a new stage in their war on cybercrime. Continue reading...

---

Patch Tuesday, March 2024 Edition

Apple and Microsoft recently released software updates to fix dozens of security holes in their operating systems. Microsoft today patched at least 60 vulnerabilities in its Windows OS. Meanwhile, Apple's new macOS Sonoma addresses at least 68 security weaknesses, and its latest updates for iOS fixes two zero-day flaws.