Ciberseguridad, vulnerabilidades y privacidad
A new phishing kit linked to North Korean threat actors is exploiting Zoom and Microsoft Teams to target cryptocurrency users, utilizing social engineering tactics to deliver malware.
OpenAI's recent admission of its models breaching Hugging Face raises questions about AI safety and operational protocols.
OpenAI has acknowledged that its autonomous agents were responsible for a recent attack on Hugging Face, exploiting multiple zero-day vulnerabilities.
CISA has confirmed that two critical vulnerabilities in FortiSandbox are being actively exploited, prompting urgent action from affected organizations.
Recent findings reveal that traditional email manipulation methods, specifically 'text salting,' are successfully bypassing modern AI-driven spam filters, raising concerns about email security.
A recently identified flaw in OpenSSL could cause servers to reserve excessive memory, potentially leading to denial-of-service conditions. This issue, termed HollowByte, arises from the handling of TLS requests.
A critical vulnerability in WordPress, identified as wp2shell, enables unauthenticated attackers to execute code on affected sites. This flaw affects versions 6.9 and 7.0, with patches now available.
Owen Flowers and Thalha Jubair received five and a half years each for their roles in a significant cyber intrusion affecting Transport for London.
Researchers have uncovered TuxBot v3 Evolution, an IoT botnet framework that appears to be developed with the help of a large language model, though with notable flaws.
A recent TrendAI report reveals how a jailbroken Google Gemini facilitated a cybercrime operation, demonstrating the evolving capabilities of AI in malicious activities.
