Aggregator

Cyberbro is an open-source application that extracts IoCs from garbage input and checks their reputation using multiple services. Cyberbro features Input handling: Paste raw logs, IoCs, or fanged IoCs, and let the regex parser do the rest. Multi-service reputation checks: Verify observables (IP, hash, domain, URL) across multiple services like VirusTotal, AbuseIPDB, IPInfo, Spur.us, IP Quality score, MDE, Google Safe Browsing, Shodan, Abusix, Phishtank, ThreatFox, Github, Google. Detailed reports: Generate reports with advanced search and … More →

The post Cyberbro: Open-source tool extracts IoCs and checks their reputation appeared first on Help Net Security.

<p>Not another password change! Isn’t one (1) extra-long password enough? As a former Incident Response, Identity and Access Control, and Education and Awareness guru, I can attest that password security and complexity…</p>

Kick off 2025 with, fresh news, new exploits, techniques, tools, and more!

为持续规范汽车数据处理活动，切实保障用户合法权益，推动形成全社会共同维护汽车数据安全和促进汽车行业发展的良好环境，中国汽车工业协会、国家计算机网络应急技术处理协调中心依据《汽车数据安全管理若干规定（试

At Black Hat Europe I did a fun presentation titled SpAIware and More: Advanced Prompt Injection Exploits. Without diving into the details of the entire talk, the key point I was making is that prompt injection can impact all aspects of the CIA security triad.

However, there is one part that I want to highlight explicitly:

A Command and Control system (C2) that uses prompt injection to remote control ChatGPT instances.

Remote Controlling ChatGPT Instances!

An adversary can compromise ChatGPT instances and have them join a central Command and Control system which provides updated instructions for all the remote controlled ChatGPT instances to follow over-time.

Lineaje recently released a report identifying the US and Russia as the leading generators of open-source projects, with both countries also having the highest numbers of anonymous open-source contributions. In this Help Net Security video, Nick Mistry, SVP and CISO of Lineaje, discusses where the deepest layers of open-source software component dependencies originate from and their critical vulnerabilities. The report revealed that regardless of geographic origin, the average mid-size application has several disturbing trends leading … More →

The post Open source worldwide: Critical maintenance gaps exposed appeared first on Help Net Security.

The SANS DShield project receives a wide variety of logs submitted by participants of the DShield p

RecapIn the spring of 2021, I wrote my first retrogaming article in the form of a review for the 1

Снятие блокировок — сигнал перемен для миллионов граждан.

国际学习表征会议 ICLR 作为深度学习领域的顶级学术活动，将于 2025 年 4 月 24-28 日在新加坡举办。期间，首届 Open Science for Foundation Models (

投稿通道现已开放，欢迎投递！

NAT-102系列设备目前尚不存在补丁

速更新

聚焦源代码安全，网罗国内外最新资讯！编译：代码卫士网络安全公司 Tenable 表示，客户必须手动升级软件，重新启动因插件增量更新问题导致宕机的Nessus 漏洞扫描器代理。Tenable 公司停止

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

仅三年多时间，「插混+增程」占有率就翻了一番，增速远超纯电。作者 | 周永亮编辑 | 靖宇「插混只是过渡技术，纯电才是未来。」这是不专业汽车人曾经的判断，但如今看来，这一判断彻底错了。根据中汽协数据，

仅三年多时间，「插混+增程」占有率就翻了一番，增速远超纯电。

This article presents key insights from 2024 reports on the rise of phishing attacks, focusing on how advancements in AI and deepfake technology are making social engineering tactics more sophisticated. Cybercriminals exploit file sharing services to advance phishing attacks Examining data collected between June 2023 and June 2024, Abnormal saw file-sharing phishing volume more than triple, increasing 350% over the year. The majority of these attacks were sophisticated in nature, with 60% exploiting legitimate domains, … More →

The post How AI and deepfakes are redefining social engineering threats appeared first on Help Net Security.