Checkmarx Announces GenAI-powered AppSec Platform, Empowering Developers and AppSec

Powered by GPT-4, innovative new AI-driven capabilities lower application security (AppSec) risk and help security teams "shift everywhere" with speed and accuracy.

https://www.darkreading.com/application-...ies-faster

Investment May Be Down, but Cybersecurity Remains a Hot Sector

There's still a great deal of capital available for innovative companies helping businesses secure their IT environments.

https://www.darkreading.com/operations/i...emains-hot

Ways to Help Cybersecurity's Essential Workers Avoid Burnout

To support and retain the people who protect assets against bad actors, organizations should create a more defensible environment.

https://www.darkreading.com/edge-article...id-burnout

WordPress force installs critical Jetpack patch on 5 million sites


WordPress.com owner Automat has started force installing a security patch on millions of websites today with the help of the WordPress Security Team to address a critical vulnerability in the Jetpack plug-in. [...]


https://www.bleepingcomputer.com/news/se...ion-sites/

Toyota finds more misconfigured servers leaking customer info


Toyota Motor Corporation has discovered two additional misconfigured cloud services that leaked car owners' personal information for over seven years. [...]


https://www.bleepingcomputer.com/news/se...omer-info/

Stealthy SeroXen RAT malware increasingly used to target gamers


A stealthy remote access trojan (RAT) named 'SeroXen' has recently gained popularity as cybercriminals begin using it for its low detection rates and powerful capabilities. [...]


https://www.bleepingcomputer.com/news/se...et-gamers/

Hackers exploit critical Zyxel firewall flaw in ongoing attacks


Hackers are performing widespread exploitation of a critical-severity command injection flaw in Zyxel networking devices, tracked as CVE-2023-28771, to install malware. [...]


https://www.bleepingcomputer.com/news/se...g-attacks/

Terminator antivirus killer is a vulnerable Windows driver in disguise

A threat actor known as Spyboy is promoting a Windows defense evasion tool called "Terminator" on the Russian-speaking forum RAMP (short for Russian Anonymous Marketplace). [...]


https://www.bleepingcomputer.com/news/se...-disguise/

Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks

The threat actor known as Dark Pink has been linked to five new attacks aimed at various entities in Belgium, Brunei, Indonesia, Thailand, and Vietnam between February 2022 and April 2023.
This includes educational institutions, government agencies, military bodies, and non-profit organizations, indicating the adversarial crew’s continued focus on high-value targets.
Dark Pink, also called

https://thehackernews.com/2023/05/dark-p...rages.html

Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency Mining

A financially motivated threat actor is actively scouring the internet for unprotected Apache NiFi instances to covertly install a cryptocurrency miner and facilitate lateral movement.
The findings come from the SANS Internet Storm Center (ISC), which detected a spike in HTTP requests for “/nifi” on May 19, 2023.
“Persistence is achieved via timed processors or entries to cron,” said Dr.

https://thehackernews.com/2023/05/cyberc...-nifi.html