Xeno RAT Spread via .gg Domains and GitHub

XenoRAT is being used by North Korean hackers and other actors targeting the gaming community. It is being spread through .gg domains and a GitHub repository disguised as Roblox scripting tools.

Cyware News – Latest Cyber News – ​Read More

California Privacy Regulator to Partner With French Data Authority

The California Privacy Protection Agency (CPPA) has signed a partnership agreement with France’s Commission Nationale de l’Informatique et des Libertés (CNIL) to conduct joint research and share investigative findings on data privacy issues.

Cyware News – Latest Cyber News – ​Read More

Vanna AI Prompt Injection Vulnerability Enables RCE

The Vanna AI library has been found to have a vulnerability (CVE-2024-5565) that could allow for remote code execution (RCE) due to a prompt injection issue related to the Plotly script.

Cyware News – Latest Cyber News – ​Read More

TeamViewer Detects Security Breach in Corporate IT Environment

TeamViewer on Thursday disclosed it detected an “irregularity” in its internal corporate IT environment on June 26, 2024.
“We immediately activated our response team and procedures, started investigations together with a team of globally renowned cyber security experts and implemented necessary remediation measures,” the company said in a statement.
It further noted that its corporate IT

The Hacker News – ​Read More

No Patches for Hospital Temperature Monitors’ Critical Flaws

Researchers at Nozomi Networks uncovered four vulnerabilities in Sensor Net Connect and three flaws in the Thermoscan IP desktop application, both made by a division of French firm Proges Plus.

Cyware News – Latest Cyber News – ​Read More

French AI Startups Felt Unstoppable. Then Came the Election

With polls suggesting voters are about to swing toward the far right or hard left, the AI industry is starting to freak out.

Wired – ​Read More

Amazon Is Investigating Perplexity Over Claims of Scraping Abuse

AWS hosted a server linked to the Bezos family- and Nvidia-backed search startup that appears to have been used to scrape the sites of major outlets, prompting an inquiry into potential rules violations.

Wired – ​Read More

Beazley Security Launches With MXDR Offering

The combined skills from Beazley’s cybersecurity services team and Lodestone will go into the company’s new managed extended detection and response (MXDR) service.

darkreading – ​Read More

New FCC Pilot Shores Up Security for K-12, Libraries

Data-rich and resource-poor, schools and libraries around the country make attractive targets for cybercriminals looking for an easy score, but a new federal program is looking to aid their defenses by providing much-needed financial support.

darkreading – ​Read More

Authenticator for X, TikTok Exposes Personal User Info for 18 Months

With many popular apps, users must hand over personal information to prove their identity, and the big downside is they have no control over how that information gets processed and stored.

darkreading – ​Read More