Stay informed with Security World Trend Now! Discover the latest security trends, technologies, and strategies to protect your data, networks, and digital identity. Get expert insights and practical advice for ensuring your online safety. Explore now!
Canon Inkjet Printers at Risk of Data Breach Due to Wi-Fi Settings Vulnerability Canon, the renowned Japanese multinational corporation specializing in imaging and optical products, has issued a security advisory warning users about a potential vulnerability in its inkjet printers. The concern revolves around the inadequate deletion of sensitive information related to Wi-Fi settings stored…
New Tactics and Techniques: Space Pirates Cybercrime Group An Emerging Threat In recent months, the notorious cybercrime group known as the Space Pirates has undergone a significant transformation in its operations. Previously focused on espionage and data theft, the group has recently showcased a newfound technical expertise, leading to a surge in attacks and the…
Cyber Insurance and the Ransomware Challenge: A New Analysis A recent analysis conducted by the Royal United Services Institute (RUSI), the University of Kent, Oxford Brookes University, and De Montfort University challenges the widely held belief that victims of ransomware with cyber insurance are more likely to pay ransoms than those without. The report, titled…
Data-stealing Malware Targeting macOS Users with Hidden Virtual Network Computing (hVNC) Recently, cybersecurity researchers have discovered a new variant of data-stealing malware that specifically targets macOS users. This malware uses a sneaky approach that utilizes Hidden Virtual Network Computing (hVNC), a modified version of Virtual Network Computing (VNC) software commonly used by IT teams for…
Cyber Insurance Investment: Forgepoint Capital’s Series A Bet on Converge Insurance Introduction Venture capital firm Forgepoint Capital has announced a $15 million Series A investment in Converge Insurance, a New York-based tech startup in the cyber-insurance sector. This marks Forgepoint’s second investment in the cyber-insurance industry, following last year’s support of Surefire Cyber, a startup…
## Cloud Security: Iranian-Run ISP ‘Cloudzy‘ Engaging in Illicit Activities In a recent report, cybersecurity startup Halcyon has exposed an Iranian-run company named Cloudzy that is providing command-and-control services to over 20 hacking groups, including ransomware operators, spyware vendors, and state-sponsored actors. Despite being registered in the United States, Cloudzy is believed to be operated…
Endpoint Security: Collide+Power Side-Channel Attack Overview A group of researchers from Graz University of Technology in Austria and the CISPA Helmholtz Center for Information Security in Germany has discovered a new power side-channel attack called Collide+Power. This attack can be used to obtain sensitive information from nearly any modern CPU, including those from Intel, AMD,…
Malware “Submarine” Targets Barracuda Email Security Gateway Vulnerability IT security teams should be on high alert as a new and dangerous malware called “Submarine” exploits a zero-day vulnerability in Barracuda’s Email Security Gateway (ESG) appliances. This malware is being used by a threat actor known as UNC4841, who has been carrying out a relentless cyber…
Few Zero-Day Vulnerabilities, But Still Causes for Concern In its latest release, Firefox has fixed several vulnerabilities that could have potentially been exploited by cyber attackers. While there are no zero-day vulnerabilities in this release, there are still several bugs that caught our attention. CVE-2023-4045: Offscreen Canvas Bypasses Cross-Origin Restrictions One of the bugs fixed…
New AI-Based Malicious Chatbots Pose Cybersecurity Threat Introduction The developer behind the FraudGPT malicious chatbot is reportedly preparing to unleash even more sophisticated adversarial tools based on generative artificial intelligence (AI) and Google’s Bard technology. These new tools, called DarkBART and DarkBERT, will give cybercriminals access to AI capabilities that go beyond existing offerings in…