Tag: security
LLM services are being hit by hackers looking to sell on private info
Using cloud-hosted large language models (LLM) can be quite expensive, which is why hackers have apparently begun started stealing, and selling, login credentials to the tools. Cybersecurity researchers Sysdig Threat Research Team recently spotted one such campaign, dubbing it LLMjacking. In its report, Sysdig said it observed a threat actor…
Read More
A new Spectre-esque cyberattack has been found — Intel CPUs under attack once again by encryption-cracking campaign
Academic researchers from multiple universities recently discovered a new Spectre-like method of extracting secrets from modern Intel processors. However, Intel says that the original Spectre mitigation fixes these flaws, too. A group of researchers from the University of California San Diego, Purdue University, UNC Chapel Hill, Georgia Institute of Technology,…
Read More
Monday.com removes feature after it was abused in phishing attacks
Popular project management and collaboration tool Monday.com was forced to disable one of its features after it was abused by a threat actor to send out phishing emails. The “Share Update” feature allows users to share real-time updates, progress, or important information with team members, or stakeholders. Users can post…
Read More
Nearly a million victims hit by massive BogusBazaar campaign — credit card details stolen, but here’s how to stay safe
Almost a million people around the world have fallen victim to a highly organized fraud campaign, which scammed them out of some $50 million in the past couple of years. According to a report from SRLabs, a group of cyber-criminals, supported by a wider network of affiliates, were organized into…
Read More
Boeing says it refused to pay massive ransomware demand
Boeing has revealed it refused to pay a $200 million ransom demand from ransomware hackers who stole a tranche of sensitive data in 2023. The US Department of Justice recently unsealed an indictment against one Dmitry Yuryevich Khoroshev, who is being accused of being the one to develop and maintain…
Read More
Security flaws in BIG-IP system could have put entire networks at risk
BIG-IP Next Central Manager (NCM), a centralized management and orchestration platform for F5’s BIG-IP product family, was vulnerable to two major flaws which allowed malicious actors to take over its managed assets. The bugs, which have since been patched, are described as an SQL injection vulnerability, and an OData injection…
Read More