Visa Warns of New JSOutProx Malware Variant Targeting Financial Organizations

First encountered in December 2019, JsOutProx is a RAT and highly obfuscated JavaScript backdoor that allows its operators to run shell commands, download additional payloads, execute files, capture screenshots, establish persistence, and more.

Cyware News – Latest Cyber News – ​Read More

57,000 Kaspersky Fan Club Forum User Data Leaked in Hosting Breach

By Waqas

Hacker group RGB claims responsibility for breaching Kaspersky’s fan club and the Prosecutor’s Office of the Russian Federation, leaking over 100,000 criminal records.

This is a post from HackRead.com Read the original post: 57,000 Kaspersky Fan Club Forum User Data Leaked in Hosting Breach

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Vulnerabilities Exposed Hugging Face to AI Supply Chain Attacks

By Deeba Ahmed

Wiz.io, known for its cloud security expertise, and Hugging Face, a leader in open-source AI tools, are combining their knowledge to develop solutions that address these security concerns. This collaboration signifies a growing focus on securing the foundation of AI advancements.

This is a post from HackRead.com Read the original post: Vulnerabilities Exposed Hugging Face to AI Supply Chain Attacks

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Critical Bugs Put Hugging Face AI Platform in a ‘Pickle’

One issue would have allowed cross-tenant attacks, and another enabled access to a shared registry for container images; exploitation via an insecure Pickle file showcases emerging risks for AI-as-a-service more broadly.

darkreading – ​Read More

U.K. and U.S. Agree to Collaborate on the Development of Safety Tests for AI Models

The U.K. government has formally agreed to work with the U.S. in developing safety tests for advanced AI models.

Security | TechRepublic – ​Read More

How Do We Integrate LLMs Security Into Application Development?

Large language models require rethinking how to bake security into the software development process earlier.

darkreading – ​Read More

Beware the Blur: Phishing Scam Drops Byakugan Malware via Fake PDF

By Deeba Ahmed

New Byakugan Malware Steals Data, Grants Remote Access & Uses OBS Studio to Spy! Fortinet reveals a phishing campaign distributing Byakugan malware disguised as a PDF. Don’t click! Learn how to stay safe.

This is a post from HackRead.com Read the original post: Beware the Blur: Phishing Scam Drops Byakugan Malware via Fake PDF

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Panera Bread Fuels Ransomware Suspicions With Silence

The restaurant chain hasn’t provided any information regarding what led to a widespread IT outage, and customers and employees are asking for answers.

darkreading – ​Read More

CISO Corner: Ivanti’s Mea Culpa; World Cup Hack; CISOs & Cyber Awareness

Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: Dealing with a Ramadan cyber spike; funding Internet security; and Microsoft’s Azure AI changes.

darkreading – ​Read More

This backdoor almost infected Linux everywhere: The XZ Utils close call

For the first time, an open-source maintainer put malware into a key Linux utility. We’re still not sure who or why – but here’s what you can do about it.

Latest stories for ZDNET in Security – ​Read More