Last year, the Open Worldwide Application Security Project (OWASP) published multiple versions of the “OWASP Top 10 For Large Language Models,” reaching a 1.0 document in August and a 1.1…
Category: Cyber Security
LockBit ransomware group resurfaces after law enforcement takedown
The threat actors behind the LockBit ransomware operation have resurfaced on the dark web using new infrastructure, just days after an international law enforcement exercise took control of its servers.…
Authorities say LockBit administrator “LockBitSupp” has cooperated with law enforcement
LockBitSupp, the individual(s) behind the persona representing the LockBit ransomware service on cybercrime forums such as Exploit and XSS, “has engaged with law enforcement,” authorities said. The development comes following…
Incorrectly configured custom Salesforce apps expose company data
A new security advisory warns Salesforce users with custom instances to check for common programming errors and misconfigurations that can expose their sales data. At the heart of the problem…
Cyber insurance must evolve to provide greater benefits
Skyrocketing rewards AND complicated political terms they have put insurance policies across all sectors under the microscope. And with new compliance regulations aimed at addressing the record number of cyber…
“KeyTrap” DNS bug threatens widespread Internet outages
Although it has been there since 2000, researchers were only recently able to discover a fundamental design flaw in a security extension to the Domain Name System (DNS), which under…
Collaborate on standardized threat investigation and response
Data is the lifeblood of any organization’s security strategy. Data from dozens of IT and security tools spread across a company’s vast multicloud infrastructure provides organizations with critical visibility into…
Alarm over GenAI risk fuels security spending in Middle East and Africa
The rapid adoption of generative artificial intelligence (GenAI) is pushing organizations in the Middle East and Africa to strengthen data privacy and cloud security protections in an effort to ward…
Microsoft expands free registration capabilities to all U.S. federal agencies
February 24, 2024PressroomActive Directory/data protection Microsoft has expanded free logging capabilities to all US federal agencies that use Microsoft Purview Audit regardless of license level, more than six months after…
PSYOP campaigns targeting Ukraine – Safe Week with Tony Anscombe
video Presented in two waves, the campaign sought to demoralize Ukrainians and Ukrainians abroad with disinformation messages on war-related topics. February 23, 2024 This week, ESET researchers revealed their findings…