4 Ways to Fight AI-Based Fraud – Dark Reading
Generative AI is being used to make cyberscams more believable. Here’s how organizations can counter that using newly emerging tools and reliable methods. – Read More
October 2024
North Korea’s ‘Stonefly’ APT Swarms US Private Co’s. for Profit – Dark Reading
Despite a $10 million bounty on one member, APT45 is not slowing down, pivoting from intelligence gathering to extorting funds for Kim Jong-Un’s regime. – Read More
NSA Releases 6 Principles of OT Cybersecurity – Dark Reading
Organizations can use this guide to make decisions for designing, implementing, and managing OT environments to ensure they are both safe and secure, as well as enable business continuity for…
Unix Printing Vulnerabilities Enable Easy DDoS Attacks – Dark Reading
All an attacker needs to exploit flaws in the Common Unix Printing System is a few seconds and less than 1 cent in computing costs. – Read More
Cloudflare reports thwarting largest-ever DDoS attack – CSO Online
Content distribution network Cloudflare has reported mitigating the largest distributed denial-of-service (DDoS) attack seen to date. The attack by unknown perpetrators, observed in September, was part of a bigger campaign…
Fake Trading Apps Target Victims Globally via Apple App Store and Google Play – The Hacker News
A large-scale fraud campaign leveraged fake trading apps published on the Apple App Store and Google Play Store, as well as phishing sites, to defraud victims, per findings from Group-IB.…
LLMs hallucinating non-existent developer packages could fuel supply chain attacks – CSO Online
Large Language Models (LLMs) have a serious “package hallucination” problem that could lead to a wave of maliciously-coded packages in the supply chain, researchers have discovered in one of the…
China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration – The Hacker News
A previously undocumented threat actor called CeranaKeeper has been linked to a string of data exfiltration attacks targeting Southeast Asia. Slovak cybersecurity firm ESET, which observed campaigns targeting governmental institutions…
Python-Based Malware Slithers Into Systems via Legit VS Code – Dark Reading
The prolific Chinese APT Mustang Panda is the likely culprit behind a sophisticated cyber-espionage attack that sets up persistent remote access to victim machines. – Read More
Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals – The Hacker News
A spear-phishing email campaign has been observed targeting recruiters with a JavaScript backdoor called More_eggs, indicating persistent efforts to single out the sector under the guise of fake job applicant…
A ‘people first’ approach to neuroinclusion – Law Gazette – Features
Neurodiversity. – Read More
Bracing for the storm: How the Autumn Budget could impact the legal sector – Legal Futures
As we approach the much-anticipated Autumn Budget on October 30, 2024, Prime Minister Keir Starmer has set the tone for what he describes as a “painful” economic roadmap. The post…
Adverse possession – the time to believe? – Law Gazette – Features
Property disputes. – Read More
Top 5 Myths of AI & Cybersecurity – Dark Reading
Organizations looking to maximize their security posture will find AI a valuable complement to existing people, systems, and processes. – Read More
Improved Practising Certificate Renewal Portal: now live – Law Gazette – Features
(Sponsored content.) Craig Reid, Sales Director at Shire Professional Funding, on enhancements made to the payment portal for Practising Certificate fees. – Read More