The Hacker News Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to [email protected]
- OpenAI Blocks 20 Global Malicious Campaigns Using AI for Cybercrime and Disinformationby [email protected] (The Hacker News) on 10 October 2024 at 1:27 pm
OpenAI on Wednesday said it has disrupted more than 20 operations and deceptive networks across the world that attempted to use its platform for malicious purposes since the start of the year. This activity encompassed debugging malware, writing articles for websites, generating biographies for social media accounts, and creating AI-generated profile pictures for fake accounts on X. "Threat
- Experts Warn of Critical Unpatched Vulnerability in Linear eMerge E3 Systemsby [email protected] (The Hacker News) on 10 October 2024 at 12:10 pm
Cybersecurity security researchers are warning about an unpatched vulnerability in Nice Linear eMerge E3 access controller systems that could allow for the execution of arbitrary operating system (OS) commands. The flaw, assigned the CVE identifier CVE-2024-9441, carries a CVSS score of 9.8 out of a maximum of 10.0, according to VulnCheck. "A vulnerability in the Nortek Linear eMerge E3 allows
- 6 Simple Steps to Eliminate SOC Analyst Burnoutby [email protected] (The Hacker News) on 10 October 2024 at 11:00 am
The current SOC model relies on a scarce resource: human analysts. These professionals are expensive, in high demand, and increasingly difficult to retain. Their work is not only highly technical and high-risk, but also soul-crushingly repetitive, dealing with a constant flood of alerts and incidents. As a result, SOC analysts often leave in search of better pay, the opportunity to move beyond
- Cybercriminals Use Unicode to Hide Mongolian Skimmer in E-Commerce Platformsby [email protected] (The Hacker News) on 10 October 2024 at 7:18 am
Cybersecurity researchers have shed light on a new digital skimmer campaign that leverages Unicode obfuscation techniques to conceal a skimmer dubbed Mongolian Skimmer. "At first glance, the thing that stood out was the script's obfuscation, which seemed a bit bizarre because of all the accented characters," Jscrambler researchers said in an analysis. "The heavy use of Unicode characters, many
- CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patchesby [email protected] (The Hacker News) on 10 October 2024 at 5:44 am
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting Fortinet products to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-23113 (CVSS score: 9.8), relates to cases of remote code execution that affects FortiOS, FortiPAM, FortiProxy, and FortiWeb. "A