Aggregator

【安全事件】Apifox桌面客户端遭供应链投毒分析

绿盟科技CERT
5 days 3 hours ago
近日，绿盟科技CERT监测到Apifox官方CDN托管的前端JS文件遭受了供应链投毒，恶意脚本被植入经过多重混淆的JavaScript代码，Apifox桌面客户端启动后会自动加载，后续实现远程命令执行。影响范围较大，请相关用户尽快采取措施进行排查与防护。

【安全事件】AI基础设施LiteLLM供应链投毒预警通告

绿盟科技CERT
5 days 3 hours ago
近日，绿盟科技CERT监测到LiteLLM的在PyPI遭受了TeamPCP团伙的供应链投毒，用户触发后会收集主机信息、窃取SSH密钥、云服务凭证、K8s密钥、SSL证书私钥和加密货币钱包等敏感数据，影响范围广泛，请相关用户尽快采取措施进行排查与防护。

Researchers uncover WebRTC skimmer bypassing traditional defenses

Security Affairs
5 days 3 hours ago
Researchers found a new skimmer using WebRTC to steal and send payment data, bypassing traditional security controls. Sansec researchers discovered a new payment skimmer that uses WebRTC data channels instead of typical web requests to load malicious code and exfiltrate stolen payment data. “What sets this attack apart is the skimmer itself. Instead of the usual […]
Pierluigi Paganini

Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in Recent Mass Attacks

The Hackers News
5 days 4 hours ago
The kernel exploit for two security vulnerabilities used in the recently uncovered Apple iOS exploit kit known as Coruna is an updated version of the same exploit that was used in the Operation Triangulation campaign back in 2023, according to new findings from Kaspersky. "When Coruna was first reported, the public evidence wasn't sufficient to link its code to Triangulation — shared
The Hacker News

As the US Midterms Approach, AI Is Going to Emerge as a Key Issue Concerning Voters

Security Boulevard
5 days 4 hours ago

In December, the Trump administration signed an executive order that neutered states’ ability to regulate AI by ordering his administration to both sue and withhold funds from states that try to do so. This action pointedly supported industry lobbyists keen to avoid any constraints and consequences on their deployment of AI, while undermining the efforts of consumers, advocates, and industry associations concerned about AI’s harms who have spent years pushing for state regulation.

Trump’s actions have clarified the ideological alignments around AI within America’s electoral factions. They set down lines on a new playing field for the midterm elections, prompting members of his party, the opposition, and all of us to consider where we stand in the debate over how and where to let AI transform our lives...

The post As the US Midterms Approach, AI Is Going to Emerge as a Key Issue Concerning Voters appeared first on Security Boulevard.

Bruce Schneier

SLH

Dark Feed IO
5 days 4 hours ago

You must login to view this content

cohenido

Microsoft Entra ID New Feature Removes MFA Limitations for Users

Cyber Security News
5 days 4 hours ago

Multifactor authentication operates as a critical defense mechanism for securing user identities against targeted cyber attacks. Microsoft reports that implementing MFA effectively reduces the risk of account compromise by more than 99%. To expand these protections, Microsoft has announced the General Availability of external multifactor authentication for Microsoft Entra ID. This release removes previous platform […]

The post Microsoft Entra ID New Feature Removes MFA Limitations for Users appeared first on Cyber Security News.

Abinaya

评论 | 强化打击跨境电诈的执法合力

中国信息安全
5 days 4 hours ago
电信网络诈骗犯罪是国际社会共同面对的打击治理难题。随着信息技术的快速发展，电诈犯罪已从区域性现象演变为全球性威胁，犯罪团伙利用网络的无国界性，将诈骗窝点、技术支撑、资金流转等环节分散在不同国家和地区，形成了组织严密、分工精细的跨国犯罪网络。

观点 | 探索人工智能环境下的数据安全治理路径

中国信息安全
5 days 4 hours ago
习近平总书记强调，当前人工智能、大数据等新技术新应用不断涌现，给网络生态治理带来挑战，也提供新的支持条件。要完善分级分类的安全监管机制，筑牢网络安全和数据安全防线。这为应对技术快速发展中的治理与安全协同工作指明方向。

Managed ad