CyberNews Security professionals have long been aware of the potential for artificial intelligence (AI) models to discover and exploit software vulnerabilities, but a recent trend highlights just how easily this can be done. Over the past few months, several instances have come to light where AI-powered tools have identified previously unknown vulnerabilities in popular software packages, … Read more
A Massive Malware Campaign Unfolds: SANS ISC Stormcast Highlights the Threat The latest SANS Internet Stormcast has shed light on a significant malware campaign that’s been unfolding in recent days, affecting organizations across various sectors. The malicious activity is attributed to a highly sophisticated strain of malware known as “Emotet,” which has been wreaking havoc … Read more
The cybersecurity industry has been obsessed with finding vulnerabilities for years, but it’s not the discovery itself that’s the problem – it’s what happens next. With the help of AI, organizations are now flooded with more data than ever before, making it impossible to prioritize and act on the most critical issues. For security teams, … Read more
Threat actors are using a cunning technique called prompt injection attacks to trick artificial intelligence (AI) agents into making cryptocurrency payments or trusting fake online platforms. This sophisticated tactic exploits vulnerabilities in how AI systems interact with websites, allowing hackers to manipulate these agents into performing malicious actions. The threat is particularly concerning because it … Read more
The emergence of QuimaRAT, a Java-based malware-as-a-service (MaaS) platform, poses a significant threat to organizations and individuals alike. This versatile threat can run on multiple operating systems, including Windows, Linux, and macOS, making it a formidable tool in the hands of malicious actors. QuimaRAT’s ability to adapt to various environments is rooted in its Java-based … Read more
A new and alarming vulnerability, dubbed TrojPix, has been discovered in air-gapped systems, allowing hackers to extract sensitive data through the electromagnetic emissions of video cables. This exploit is particularly concerning due to its ability to breach supposedly secure environments with minimal technical expertise. The potential for damage is substantial, as it’s estimated that thousands … Read more
The Cybersecurity Conundrum: Why Finding Vulnerabilities Isn’t Enough Security leaders have a problem on their desk, and it’s not what you think. It’s not about discovering vulnerabilities or collecting more data; it’s about deciding which ones actually matter. Despite billions spent on better visibility, organizations are still struggling to stay secure. The introduction of AI … Read more
A new and sophisticated threat has emerged on the cybersecurity landscape, one that uses artificial intelligence (AI) to evade detection by traditional security scanners. SkillCloak is a malicious AI-powered tool that allows attackers to conceal their malware’s true nature, making it extremely difficult for defenders to identify and block the threats. SkillCloak works by using … Read more
A Critical Flaw in Opera GX Allows Malicious Sites to Stealthily Install Mods and Steal Data from Visited Pages Opera GX, a gaming-focused web browser developed by Opera Software, has been found vulnerable to a critical flaw that could allow malicious websites to auto-install mods and steal sensitive information from users who visit them. This … Read more
A new, highly versatile malware-as-a-service (MaaS) platform called QuimaRAT has been discovered, capable of compromising Windows, Linux, and macOS systems through Java-based attacks. This sophisticated threat leverages AI-driven vulnerability discovery to identify and exploit weaknesses in software applications. QuimaRAT’s ability to run on multiple operating systems makes it a versatile tool for attackers seeking to … Read more