Latest Cybersecurity News and Articles

---

Anycubic 3D Printers Hacked Worldwide to Expose Security Flaw

The hackers have urged Anycubic to open-source their 3D printers due to software deficiencies and have warned affected customers to disconnect their printers from the Internet until the security issue is patched.

---

Cryptojacking is No Longer the Sole Focus of Cloud Attackers

Cloud-focused malware campaigns are increasingly targeting services like Docker, Redis, Kubernetes, and Jupyter, requiring security teams to reassess their approaches to identifying and responding to emerging cloud threats.

---

Exploitation of vulnerabilities affecting Ivanti Connect Secure and Ivanti Policy Secure

Organisations are encouraged to take immediate action to mitigate vulnerabilities affecting Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) gateways (CVE-2023-46805, CVE-2024-21887, CVE-2024-21888 and CVE-2024-21893, CVE-2024-22024), and follow the latest vendor advice.

---

New Silver SAML Attack Evades Golden SAML Defenses in Identity Systems

Cybersecurity researchers have disclosed a new attack technique called Silver SAML that can be successful even in cases where mitigations have been applied against Golden SAML attacks. Silver SAML “enables the exploitation of SAML to launch attacks from an identity provider like Entra ID against applications configured to use it for authentication, such as Salesforce,” Semperis

---

Report: Ads for Zero-Day Exploit Sales Surge 70% Annually

Threat actors are increasingly using zero-day exploits to enhance the success of advanced targeted attacks, with a 70% increase in public ads selling zero-day exploits observed between 2022 and 2023, according to Group-IB.

---

Biden administration issues executive order to secure U.S. ports

Security experts offer their perspective on the recent Biden-Harris executive order, which is intended to secure the nation's ports. 

---

Report: Vishing, Smishing, and Phishing Attacks Rise 1,265% Post-ChatGPT

According to a report by Enea, 76% of enterprises lack sufficient voice and messaging fraud protection as AI-powered vishing and smishing skyrocketed following the launch of ChatGPT.

---

Report: Most Commercial Code Contains High-Risk Open Source Bugs

The ninth annual Open Source Security and Risk Analysis (OSSRA) report by Synopsys revealed that 74% of commercial codebases contain high-risk open source vulnerabilities, an increase from 48% in 2022.

---

New analysis highlights strength of Ukraine's defence against “unprecedented” Russian offensive

Report from the European Cyber Conflict Research Initiative (ECCRI) gives new insights into the role of cyber criminals and political hacktivists in a conflict, and critical questions around industry support to Ukraine's cyber resilience.

---

Australian Spy Chief Fears Critical Infrastructure Sabotage

Adversaries are actively conducting sophisticated cyber reconnaissance on critical infrastructure networks in Australia, posing a significant threat to national security.

---

BEAST Attack on AI Models can Break LLM Guardrails in a Minute

Computer scientists have developed a fast and efficient method, called BEAST, to generate harmful prompts that elicit undesirable responses from large language models using an Nvidia RTX A6000 GPU with 48GB of memory.

---

BobTheSmuggler: Open-source tool for undetectable payload delivery

The open-source tool supports various payload delivery chains and has future plans to add more image polyglots, file extensions, and EML file support for stealthy payload delivery.

---

European Retailer Pepco Loses $16.8 Million Due to Phishing Attack

While customer, supplier, and colleague information was not compromised, the incident may have involved a social engineering attack known as business email compromise (BEC).

---

GTPDOOR Linux Malware Targets Telecoms, Exploiting GPRS Roaming Networks

Threat hunters have discovered a new Linux malware called GTPDOOR that’s designed to be deployed in telecom networks that are adjacent to GPRS roaming exchanges (GRX) The malware is novel in the fact that it leverages the GPRS Tunnelling Protocol (GTP) for command-and-control (C2) communications. GPRS roaming allows subscribers to access their GPRS services while they are

---

Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks

The notorious Lazarus Group actors exploited a recently patched privilege escalation flaw in the Windows Kernel as a zero-day to obtain kernel-level access and disable security software on compromised hosts. The vulnerability in question is CVE-2024-21338 (CVSS score: 7.8), which can permit an attacker to gain SYSTEM privileges. It was resolved by Microsoft earlier this month as part

---

How to Prioritize Cybersecurity Spending: A Risk-Based Strategy for the Highest ROI

As an IT leader, staying on top of the latest cybersecurity developments is essential to keeping your organization safe. But with threats coming from all around — and hackers dreaming up new exploits every day — how do you create proactive, agile cybersecurity strategies? And what cybersecurity approach gives you the most bang for your buck, mitigating your risks and maximizing the value of your

---

Report: Cyber Espionage France’s Top Threat Ahead of 2024 Paris Olympics

The 2023 Cyber Threat Landscape report from France’s National Cybersecurity Agency (ANSSI) highlights a significant increase in cyber espionage campaigns targeting individuals and non-governmental organizations.

---

German Applied Sciences University Announces Being Hit by Criminal Cyberattack

Hochschule Kempten, a university of applied sciences in Germany, has been targeted by a criminal cyberattack. The attack has affected access to several IT systems, including email, while the telephone system remains operational.

---

Russian Hacktivists Continue Claiming DDoS Disruptions

Russian hacktivist groups' attacks have minimal impact and are more psychological than kinetic, aiming to degrade confidence in governments and rally support for Russian President Vladimir Putin.

---

Update: Chinese Group Runs Highly Persistent Ivanti Zero-Day Exploits

Chinese threat actor UNC5325 is adept at using novel malware and "living off the land" techniques to persist in hacked devices even after factory resets and system upgrades.