AI-Controlled Fighter Jets Are Dogfighting With Human Pilots Now

Plus: New York’s legislature suffers a cyberattack, police disrupt a global phishing operation, and Apple removes encrypted messaging apps in China.

Security Latest – ​Read More

CrushFTP Warns Users to Patch Exploited Zero-Day “Immediately”

As the company also explains in a public security advisory published on Friday, this zero-day bug enables unauthenticated attackers to escape the user’s virtual file system (VFS) and download system files.

Cyware News – Latest Cyber News – ​Read More

Critical Update: CrushFTP Zero-Day Flaw Exploited in Targeted Attacks

Users of the CrushFTP enterprise file transfer software are being urged to update to the latest version following the discovery of a security flaw that has come under targeted exploitation in the wild.
“CrushFTP v11 versions below 11.1 have a vulnerability where users can escape their VFS and download system files,” CrushFTP said in an advisory released Friday.

The Hacker News – ​Read More

Palo Alto Networks Discloses More Details on Critical PAN-OS Flaw Under Attack

Palo Alto Networks has shared more details of a critical security flaw impacting PAN-OS that has come under active exploitation in the wild by malicious actors.
The company described the vulnerability, tracked as CVE-2024-3400 (CVSS score: 10.0), as “intricate” and a combination of two bugs in versions PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 of the software.
“In

The Hacker News – ​Read More

CISO Corner: Breaking Staff Burnout, GPT-4 Exploits, Rebalancing NIST

SecOps highlights this week include the executive role in “cyber readiness;” Cisco’s Hypershield promise; and Middle East cyber ops heat up.

darkreading – ​Read More

FBI Director Wray Issues Dire Warning on China’s Cybersecurity Threat

Chinese actors are ready and poised to do “devastating” damage to key US infrastructure services if needed, he said.

darkreading – ​Read More

Breakthrough in Quantum Cloud Computing Ensures its Security and Privacy

Oxford University researchers used an approach dubbed “blind quantum computing” to connect two quantum computing entities in a way that is completely secure.

Security | TechRepublic – ​Read More

UNDP, City of Copenhagen Targeted in Data-Extortion Cyberattack

A ransomware gang claimed responsibility for the attack, though it is unknown if a ransom was demanded or paid.

darkreading – ​Read More

Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam

CryptoChameleon attackers trade quantity for quality, dedicating time and resources to trick even the most diligent user into handing over their high-value credentials.

darkreading – ​Read More