How Zero Trust Can Protect Systems Against Generative AI Agents

Researchers explore a love-hate relationship with AI tools like ChatGPT, which can be used to both attack and defend more efficiently.

https://www.darkreading.com/dr-tech/how-...-ai-agents

APT41 Taps Google Red-Teaming Tool in Targeted Info-Stealing Attacks

China-linked APT41 group targeted a Taiwanese media organization and an Italian job agency with standard, open source penetration test tools, in a change in strategy.

https://www.darkreading.com/vulnerabilit...ng-attacks

Researchers Discover First-Ever Major Ransomware Targeting macOS

In targeting Apple users, LockBit is going where no major ransomware gang has gone before. But it's a warning shot, and Mac users need not worry yet.

https://www.darkreading.com/remote-workf...ting-macos

NSO Group Is Back in Business With 3 New iOS Zero-Click Exploits

An investigation concludes that NSO Group was hired in 2022 to deploy Pegasus spyware against human rights workers in Mexico and other targets.

https://www.darkreading.com/attacks-brea...k-exploits

How to Prevent 2 Common Attacks on MFA

MFA isn't immune from the tug of war between attackers and defenders.

https://www.darkreading.com/endpoint/how...cks-on-mfa

Akamai Technologies to Acquire API Security Company Neosec

Combined solutions expected to deliver complete API visibility and security coverage across all of the OWASP API top 10 attacks.

https://www.darkreading.com/application-...any-neosec

Google Search outage prevents some from seeing search results


Google Search is currently suffering a partial outage that prevents the search engine from returning search results for some people. [...]


https://www.bleepingcomputer.com/news/go...h-results/

March 2023 broke ransomware attack records with 459 incidents


March 2023 was the most prolific month recorded by cybersecurity analysts in recent years, measuring 459 attacks, an increase of 91% from the previous month and 62% compared to March 2022. [...]


https://www.bleepingcomputer.com/news/se...incidents/

Play ransomware gang uses custom Shadow Volume Copy data-theft tool


The Play ransomware group has developed two custom tools in .NET, namely Grixba and VSS Copying Tool, which it uses to improve the effectiveness of its cyberattacks. [...]


https://www.bleepingcomputer.com/news/se...heft-tool/

Google patches another actively exploited Chrome zero-day

Google has released a security update for the Chrome web browser to fix the second zero-day vulnerability found to be exploited in attacks this year. [...]


https://www.bleepingcomputer.com/news/se...-zero-day/