China APT Cracks Cisco Firmware in Attacks Against the US and Japan

Sophisticated hackers are rewriting router firmware in real time and hiding their footprints, leaving defenders with hardly a fighting chance.

https://www.darkreading.com/threat-intel...t-us-japan

Researchers Release Details of New RCE Exploit Chain for SharePoint

One of the already-patched flaws enables elevation of privilege, while the other enables remote code execution.

https://www.darkreading.com/vulnerabilit...sharepoint

Netscout Identified Nearly 7.9M DDOS Attacks in the First Half of 2023



https://www.darkreading.com/attacks-brea...lf-of-2023

Fortinet Announces Formation of Veterans Program Advisory Council to Narrow the Cybe



https://www.darkreading.com/operations/f...ran-talent

Radiant Logic Announces Expanded Identity Analytics and Data Management Platform Cap



https://www.darkreading.com/remote-workf...abilities-

New ZeroFont phishing tricks Outlook into showing fake AV-scans


Hackers are utilizing a new trick of using zero-point fonts in emails to make malicious emails appear as safely scanned by security tools in Microsoft Outlook. [...]


https://www.bleepingcomputer.com/news/se...-av-scans/

GitHub repos bombarded by info-stealing commits masked as Dependabot


Hackers are breaching GitHub accounts and inserting malicious code disguised as Dependabot contributions to steal authentication secrets and passwords from developers. [...]


https://www.bleepingcomputer.com/news/se...ependabot/

Modern GPUs vulnerable to new GPU.zip side-channel attack


Researchers from four American universities have developed a new GPU side-channel attack that leverages data compression to leak sensitive visual data from modern graphics cards when visiting web pages. [...]


https://www.bleepingcomputer.com/news/se...el-attack/

US and Japan warn of Chinese hackers backdooring Cisco routers


A joint cybersecurity advisory by the FBI, NSA, CISA, and the Japanese NISC (cybersecurity) and NPA (police) sheds light on the techniques the Chinese threat actors known as BlackTech use to attack Japanese and U.S. organizations. [...]


https://www.bleepingcomputer.com/news/se...o-routers/

Microsoft now rolling out AI-powered Paint Cocreator to Insiders


Microsoft's new AI image generation Paint tool powered by OpenAI's DALL-E text-to-image model is now rolling out to Windows Insiders in Dev and Canary channels. [...]


https://www.bleepingcomputer.com/news/mi...-insiders/