CyberNews Major Upgrade to ChatGPT Brings More Reliable Answers and Greater Control Over Model’s Reasoning In a significant move, OpenAI has rolled out a major upgrade to its popular chatbot platform, ChatGPT. The update brings more reliable answers, greater control over the model’s reasoning, and improved performance for users of all levels, including those who don’t … Read more
Cyber Attack Hits Swiss Government’s SharePoint Servers, Compromising 200 Accounts A recent cyber attack has compromised approximately 200 accounts on the Swiss government’s Microsoft SharePoint servers. The breach was detected by security specialists who noticed unusual activity on the servers on July 28. After confirming the incident, the Federal Office for Information Technology and Telecommunication … Read more
A Recent Wave of Cyberattacks Targets Hedge Funds, Private-Equity Firms, and Financial Organizations, Linked to the BlackFile-Associated UNC6671 Extortion Group. A coordinated wave of cyberattacks has been unleashed on hedge funds, private-equity firms, and other financial organizations in recent weeks. The attacks have been linked to an extortion group known as UNC6671, which is associated … Read more
A critical patch release from Cisco has addressed 12 security flaws in its SD-WAN and IOS XE products, including three vulnerabilities that carry a maximum CVSS score of 9.8. This is one of the most significant patches issued by the company this year, underscoring the importance of keeping software up-to-date to prevent cyber attacks. The … Read more
A Critical Flaw in Zapscape KVM Could Let Privileged Code Escape Hosts, Leaving Linux Systems Vulnerable to Compromise A newly discovered vulnerability in Zapscape, a widely used open-source kernel-based virtual machine (KVM), could allow an attacker with privileged access to the guest operating system to escape and execute code on the host’s Linux system. This … Read more
Cyber Attackers Target Financial Firms, Using Sophisticated Voice Phishing Tactics to Steal Data A wave of high-stakes cyber attacks has hit several major hedge funds and private-equity firms in recent weeks, with the attackers using voice phishing tactics to trick employees into handing over sensitive corporate login credentials. The attacks are linked to an extortion … Read more
A previously unknown type of attack, dubbed “Interrupt Injection,” has been discovered to bypass defenses against Spectre v2 vulnerabilities on both Intel and AMD CPUs. This finding is significant because it highlights a previously unexplored vector for attackers to access sensitive information in systems that thought they were secure. The Interrupt Injection attack works by … Read more
**Critical Security Flaws Discovered in Cisco’s SD-WAN and IOS XE Systems** Cisco has issued a slew of critical patches for its Software-Defined Wide Area Networking (SD-WAN) and IOS XE systems, addressing 12 vulnerabilities, including three with a severity rating of 9.8 out of 10 on the Common Vulnerability Scoring System (CVSS). The affected products are … Read more
A newly discovered flaw in the Zapscape KVM (Kernel-based Virtual Machine) architecture has sparked concerns about a potential security risk that could allow privileged guest code to escape from virtual machines and gain control over Linux hosts. The vulnerability, which affects multiple distributions of Linux, including Ubuntu and Red Hat Enterprise Linux, has been identified … Read more
A notorious Canadian cybercrime suspect has pleaded guilty to a string of high-profile extortion cases, including targeting over 165 organizations that used the cloud provider Snowflake. Connor Riley Moucka, aka “Judische” and “Waifu,” admitted to stealing sensitive customer records from AT&T customers, as well as extorting companies like TicketMaster, Lending Tree, and Neiman Marcus. Moucka’s … Read more