Zero-Days in Edge Devices Become China's Cyber Warfare Tactic of Choice

While China is already among the world's most formidable threat actors, a focus on exploiting public-facing appliances makes its state-sponsored APTs more dangerous than ever.

https://www.darkreading.com/vulnerabilit...are-tactic

Google Goes After Scammers Abusing Its Bard AI Chatbot

A pair of lawsuits are part of a wider strategy to establish guardrails preventing AI-powered scams, frauds, and harassment, Google's general counsel says.

https://www.darkreading.com/attacks-brea...ai-chatbot

Microsoft Zero-Days Allow Defender Bypass, Privilege Escalation

Another two bugs in this month's set of fixes for 63 CVEs were publicly disclosed previously but have not been exploited yet.

https://www.darkreading.com/vulnerabilit...escalation

Danish Energy Attacks Portend Targeting More Critical Infrastructure

Targeted attacks against two dozen related companies is just the latest evidence that hackers want a piece of energy.

https://www.darkreading.com/ics-ot/danis...astructure

ICBC Ransomware Attack – China’s Largest Bank Forced To Use USBs

As ransomware attacks continue wreaking havoc, the latest victim turned out to be the largest…

ICBC Ransomware Attack – China’s Largest Bank Forced To Use USBs on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Microsoft November 2023 Patch Tuesday fixes 5 zero-days, 58 flaws


Today is Microsoft's November 2023 Patch Tuesday, which includes security updates for a total of 58 flaws and five zero-day vulnerabilities. [...]


https://www.bleepingcomputer.com/news/mi...-58-flaws/

LockBit ransomware exploits Citrix Bleed in attacks, 10K servers exposed


The Lockbit ransomware attacks use publicly available exploits for the Citrix Bleed vulnerability (CVE-2023-4966) to breach the systems of large organizations, steal data, and encrypt files. [...]


https://www.bleepingcomputer.com/news/se...s-exposed/

New CacheWarp AMD CPU attack lets hackers gain root in Linux VMs


A new software-based fault injection attack, CacheWarp, can let threat actors hack into AMD SEV-protected virtual machines by targeting memory writes to escalate privileges and gain remote code execution. [...]


https://www.bleepingcomputer.com/news/se...linux-vms/

VMware discloses critical VCD Appliance auth bypass with no patch


VMware disclosed a critical and unpatched authentication bypass vulnerability affecting Cloud Director appliance deployments. [...]


https://www.bleepingcomputer.com/news/se...-no-patch/

New Reptar CPU flaw impacts Intel desktop and server systems


Intel has fixed a high-severity CPU vulnerability in its modern desktop, server, mobile, and embedded CPUs, including the latest Alder Lake, Raptor Lake, and Sapphire Rapids microarchitectures. [...]


https://www.bleepingcomputer.com/news/se...r-systems/