Archive | Cyber Syrup

Malicious Python Packages on PyPI: A Growing Threat to Developers

Cybersecurity researchers from Fortinet FortiGuard Labs have identified two malicious Python packages uploaded to the Python Package Index (PyPI) repository

Italy Fines OpenAI €15 Million Over ChatGPT's Data Practices

Italy's data protection authority, the Garante, has imposed a €15 million ($15.66 million) fine on OpenAI, the maker of ChatGPT

Developer of LockBit Ransomware Charged by U.S. Authorities

A dual Russian and Israeli national has been charged in the United States for allegedly developing and maintaining the infamous LockBit ransomware-as-a-service (RaaS) operation

Malicious Typosquats Target npm Packages and Visual Studio Code Extensions

Threat actors have been actively uploading malicious typosquats of legitimate npm packages, such as typescript-eslint and @types/node, to the npm registry

Hacker Leaks Data from Cisco

A hacker identified as IntelBroker has leaked data stolen from a Cisco DevHub instance

DarkGate Malware Delivered via Microsoft Teams

Cybersecurity researchers have identified a new social engineering campaign that uses Microsoft Teams as a vector to deliver the DarkGate malware

Investment Scams Leveraging AI, Malvertising, and Social Media: Meet Nomani

Cybersecurity researchers are raising alarms about a sophisticated investment scam that uses social media malvertising, company-branded content, and AI-powered video testimonials featuring famous personalities to deceive victims

Malicious GitHub Repository Exfiltrates Over 390,000 WordPress Credentials

A malicious GitHub repository, was discovered to have exfiltrated over 390,000 WordPress credentials

Apple Fixes Security Vulnerability That Bypasses TCC Framework

Apple recently patched a security vulnerability in its iOS and macOS platforms that could allow attackers to bypass the Transparency, Consent, and Control (TCC) framework, granting unauthorized access to sensitive data