Infosecurity News

  1. New Research Exposes Security Risks in ChatGPT Plugins

    Salt Security discovered GPT flaws affecting plugin installation, PluginLab and OAuth

  2. Google to Restrict Election-Related Answers on AI Chatbot Gemini

    The new restriction to Google’s AI chatbot was first implemented in India, which holds elections in April, before being rolled across other nations

  3. Single RCE Bug Features Among 60 CVEs in March Patch Tuesday

    No zero-day vulnerabilities to fix in this month’s Microsoft Patch Tuesday

  4. Nearly 13 Million Secrets Spilled Via Public GitHub Repositories

    GitGuardian claims the number of secrets exposed via GitHub has quadrupled since 2021

  5. Study Reveals Top Vulnerabilities in Corporate Web Applications

    Kaspersky said access control weaknesses and failures in data protection accounted for 70% of all flaws

  6. US Intelligence Predicts Upcoming Cyber Threats for 2024

    The Office of the Director of National Intelligence (ODNI) has unveiled an unclassified version of its Annual Threat Assessment of the US Intelligence Community

  7. New Cloud Attack Targets Crypto CDN Meson Ahead of Launch

    Sysdig said the rise of the Meson Network in blockchain signals a new frontier for attackers

  8. Three-Quarters of Cyber Incident Victims Are Small Businesses

    Three-quarters of cyber-incidents Sophos responded to involved small businesses in 2023, with attackers’ main goal being data theft

  9. Lawmakers Slam UK Government’s “Ostrich Strategy” for Cybersecurity

    An influential parliamentary committee claims government short-termism is exposing the country to ransomware catastrophe

  10. Victims Lose $47m to Crypto Phishing Scams in February

    Some 57,000 victims lost $47m in phishing scams targeting their cryptocurrency last month

  11. Magnet Goblin Exploits Ivanti Vulnerabilities

    The threat actor uses custom Linux malware to pursue financial gain, according to Check Point Research

  12. BianLian Threat Actor Shifts Focus to Extortion-Only Tactics

    GuidePoint said the threat actor gained initial access via vulnerabilities in a TeamCity server

What’s hot on Infosecurity Magazine?