Malicious use of Cobalt Strike down 80% after crackdown, Fortra says

An effort launched in 2023 to curb the longstanding issue of pirated Cobalt Strike software being used by cybercriminals appears to have borne fruit.

The Record from Recorded Future News – ​Read More

Static Scans, Red Teams and Frameworks Aim to Find Bad AI Models

With hundreds of AI models found to harbor malicious code, cybersecurity firms are releasing technology to help companies manage their AI development and deployment efforts.

darkreading – ​Read More

Women in Cyber Security on the Rise, But Facing More Layoffs and Budget Cuts Than Men

In 2024, women accounted for 22% of global security teams on average, compared to 17% in 2023, according to ISC2.

Security | TechRepublic – ​Read More

Zero-Days Put Tens of 1,000s of Orgs at Risk for VM Escape Attacks

More than 41,000 ESXi instances remain vulnerable to a critical VMware vulnerability, one of three that Broadcom disclosed earlier this week.

darkreading – ​Read More

Cybercrime’s Cobalt Strike Use Plummets 80% Worldwide

Fortra, Microsoft, and Health-ISAC have combined forces to claw back one of hackers’ most prized attack tools, with massive takedowns.

darkreading – ​Read More

Taylor Swift Ticket Thieves Charged in Court for Resale Operation

The pair found a loophole through StubHub’s services, allowing them to steal tickets and resell them for personal profit, amassing hundreds of thousands of dollars.

darkreading – ​Read More

US Seize Garantex in Cryptocurrency Money Laundering Bust

Two men linked to Garantex are accused of facilitating multi-billion dollar money laundering and sanctions violations.

The post US Seize Garantex in Cryptocurrency Money Laundering Bust appeared first on SecurityWeek.

SecurityWeek – ​Read More

Home appliance company Presto says cyberattack causing delivery delays

In a filing with federal regulators, Wisconsin-based National Presto Industries — known for appliances like air fryers and pressure cookers — said a cyberattack had disrupted operations.

The Record from Recorded Future News – ​Read More

In Other News: EntrySign AMD Flaw, Massive Attack Targets ISPs, ENISA Report

Noteworthy stories that might have slipped under the radar: Google discloses AMD CPU flaw named EntrySign, ISPs in the US and China targeted in massive attack, ENISA report on NIS2 Directive.

The post In Other News: EntrySign AMD Flaw, Massive Attack Targets ISPs, ENISA Report appeared first on SecurityWeek.

SecurityWeek – ​Read More

US charges admins of Garantex for allegedly facilitating crypto money laundering for terrorists and hackers

The administrators of Garantex, Aleksej Besciokov and Aleksandr Mira Serda, allegedly knew their crypto exchange was used to launder money, according to U.S. prosecutors.

© 2024 TechCrunch. All rights reserved. For personal use only.

Security News | TechCrunch – ​Read More