Executives are prime targets for hackers using pretexting, a social engineering technique that builds trust with a fabricated story or narrative. This approach is more effective than traditional phishing as it establishes rapport between the attacker and executive. Pretexting involves creating a false connection with executives, such as pretending to be an old acquaintance or…
Papua New Guinea (PNG) has recently announced its National Data Protection and Governance Policy 2024, which aims to secure sensitive data that needs to be shared externally. The policy encourages responsible data sharing among government agencies, businesses, and stakeholders while ensuring compliance with privacy regulations. PNG’s commitment to establishing a robust data protection framework is…
A financially motivated East European threat actor, dubbed “Unfurling Hemlock,” is distributing malware using a unique approach that involves compressing multiple files into a single Microsoft Cabinet (CAB) file. This file can contain up to 10 different types of malware, including information stealers and loaders. The attacker has distributed hundreds of thousands of these CAB…
Researchers at the University of Illinois developed autonomous AI agents that can find and exploit vulnerabilities in test environments. Initially, they were given a CVE description of a vulnerability and successfully exploited it. Later, they tested the agents with previously unknown severe vulnerabilities, which the AIs had no knowledge of. The results showed that the…
NetOps teams face challenges in maintaining production services due to outdated processes and growing infrastructures. No-code automation has the potential to address these challenges by allowing engineers to automate repetitive tasks, thereby enhancing efficiency and mitigating the risk of failures. Outdated processes hold NetOps teams back, with manual command-line sequences and individual ad-hoc scripts still…