Mobile Banking Malware Surges 32%

Mobile Banking Malware Surges 32%

Global mobile banking malware has grown by 32% compared to 2022, according to data from Kaspersky’s latest annual Financial Threats Report for 2023. The report, published on May 6, highlighted a surge in attacks targeting Android users, with Afghanistan, Turkmenistan and Tajikistan experiencing the highest share of encounters with banking Trojans. Notably, Turkey leads in mobile banking malware attacks, affecting nearly three percent of users. Despite an 11% decline in financial PC malware, threats from malware…

Read More

Red Hat unveils image mode for its Linux distro

Red Hat unveils image mode for its Linux distro

“But image mode for RHEL is one of, if not the, first enterprise Linux platform to offer it,” says Ben Breard, senior principal product manager at the Red Hat Enterprise Linux business unit. “The entire operating system will be delivered as a bootable container,” Breard says. “Universal Base Image still needed to be run on a host operating system, for example – it was a container on a host.” The advantage to doing this is…

Read More

Insecure protocols leave networks vulnerable: report

Insecure protocols leave networks vulnerable: report

Nearly half (46%) use Server Message Block (SMB) v1 or v2. The SMB protocol used for file sharing and other purposes has been updated in SMB v3 to protect against vulnerabilities. Still, Cato found that many organizations continue to rely on SMB v1 and SMB v2 despite known vulnerabilities such as EternalBlue and denial of service (DoS) attacks. SMB v3 also enforces the robust AES-128-GCM encryption standard, according to the report. “The HTTP traffic analysis…

Read More

Quishing Campaign Exploits Microsoft Open Redirect Vulnerability

Quishing Campaign Exploits Microsoft Open Redirect Vulnerability

Diving into a new sophisticated campaign, exploiting Microsoft’s Open Redirect vulnerability through quishing By Elad Damari, Incident Response Group Manager, Perception Point QR codes can be found almost everywhere, helping people access useful information and other webpages as fast as they can open their smartphone cameras. Many of us don’t think twice before scanning them. But to cybercriminals, their pervasiveness presents a new opportunity; the chance to deploy a sophisticated phishing strain designed to make…

Read More

CVE-2024-21793, CVE-2024-26026: Proof of Concept Available for F5 BIG-IP Next Central Manager Vulnerabilities

CVE-2024-21793, CVE-2024-26026: Proof of Concept Available for F5 BIG-IP Next Central Manager Vulnerabilities

Researchers disclose multiple vulnerabilities in F5 BIG-IP Next Central Manager and provide proof-of-concept exploit code, which could lead to exposure of hashed passwords. Background On May 8, F5 published advisories for two vulnerabilities in the BIG-IP Next Central Manager, a centralized management console for BIG-IP Next instances. CVE Description CVSSv3 CVE-2024-21793 BIG-IP Next Central Manager OData Injection Vulnerability 7.5 CVE-2024-26026 BIG-IP Next Central Manager SQL Injection Vulnerability 7.5 Analysis CVE-2024-21793 is an OData Injection vulnerability…

Read More

97% of organizations report difficulties with identity verification

97% of organizations report difficulties with identity verification

Ping Identity released a report on the state of identity fraud, surveying 700 IT decision-makers worldwide between February and March of 2024, which found that 97% of organizations are experiences challenges with identity verification. Many respondents (49%) report that the fraud prevention strategies in place in their organization are somewhat or entirely ineffective, suggesting that many organizations do not have proper protections against identity fraud. Among those surveyed, only 45% use two-factor or multi-factor identification verification,…

Read More

CIO ESPAÑA impulsa su perspectiva global sin perder su sabor local 

CIO ESPAÑA impulsa su perspectiva global sin perder su sabor local 

Pero como el cambio es lo único que permanece, como constató hace siglos el gran Heráclito de Éfeso y como bien conocen nuestros lectores, los líderes de TI, que experimentan en su día a día la complejidad de adaptarse a los cambios y la necesidad, a su vez, de impulsarlos, ha llegado el momento de transformar esta cabecera, al calor de una digitalización que trasciende el contexto multimedia en el que nació. Porque CIO es…

Read More

AI-Powered Russian Network Pushes Fake Political News

AI-Powered Russian Network Pushes Fake Political News

Security researchers have discovered a major new Russian disinformation campaign using generative AI (GenAI) to “plagiarize and weaponize” content from major news organizations, in a bid to influence Western voters. Dubbed “CopyCop” by Recorded Future, the network uses large language model (LLM)-powered GenAI to copy content from mainstream media and then introduce political bias as it tailors that content for specific audiences. Media organizations including Al-Jazeera, Fox News, the BBC, La Croix and TV5Monde are…

Read More

Formas en que los responsables de TI pueden hacer frente a la Ley de Inteligencia Artificial de la UE

Formas en que los responsables de TI pueden hacer frente a la Ley de Inteligencia Artificial de la UE

Los sistemas de IA en los que se centra sobre todo el documento entran en las categorías de riesgo inaceptable y alto riesgo. La primera incluye aplicaciones de IA prohibidas, como las que evalúan a las personas en función de su estatus socioeconómico. La UE también prohíbe a las fuerzas de seguridad realizar identificaciones biométricas remotas en tiempo real en espacios públicos, así como el reconocimiento de emociones en el lugar de trabajo y en…

Read More

SAP, IBM Consulting partner to offer genAI-based services

SAP, IBM Consulting partner to offer genAI-based services

IBM’s consulting arm and SAP are partnering to offer generative AI-based services to enterprises to help accelerate digital transformation. The partnership, announced on Wednesday, will see both companies offer generative AI-based services via RISE with SAP offering, the companies said in a statement. RISE with SAP is the enterprise resource planning (ERP) software provider’s managed offering that helps enterprises move their on-premises ERP operations to the cloud. Earlier in May last year, SAP partnered with…

Read More
1 2 3 4 5 6 2,931