The Hacker News پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۸:۴۷

Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability in question is CVE-2024-27834 (CVSS score: 5.5), a case of improper authentication that could allow an attacker with

Malware & Threats Vulnerabilities & Zero-Day Identity & Access Security

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CSO Online پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۸:۲۵

The Sandbox Fights Back: Joe Security Launches Adaptive Detonation

AI agents help Joe Sandbox uncover malicious behavior concealed by evasion techniques and unmet execution conditions. Joe Security‘s Adaptive Detonation brings active intervention to malware analysis, helping security teams investigate threats that may conceal their behavior during an initial sandbox run. Adaptive Detonation uses AI agents to examine execution results, identify obstacles preventing a sample from reve…

Malware & Threats Phishing IoT & OT Security

Source

The Hacker News پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۸:۰۱

OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run

OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs. "Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 local privilege escalation (LPE)

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

Source

CSO Online پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۶:۳۳

Attackers turned OpsShield’s trusted update channel into a supply-chain attack

The kinks in the software supply chain are once again being exposed, with attackers now targeting OpsShield’s update process. This week, threat actors used compromised credentials to push malicious updates out to cPGuard customers. They then accessed data stored on the vendor’s servers and in its billing portal accounts, and made copies of at least three of OpsShield’s cloud servers. The company said in an advisory t…

Malware & Threats Vulnerabilities & Zero-Day Data Breach

Source

Graham Cluley پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۳:۴۵

Smashing Security podcast #491: How AI agents are spooking the banks

Bank of America has a message for its customers: please, for the love of God, stop handing your banking passwords to your AI assistant. And if your robot does something daft with your money? That's your problem, not theirs. Meanwhile, a company that promised to rescue ransomware victims without paying the criminals stands accused of... paying the criminals. ProPublica's Renee Dudley was on the case years before the i…

Malware & Threats Data Breach Ransomware

Source