The all in one place for non-profit security aid.
[[{“value”:”A new malware campaign leveraged two zero-day flaws in Cisco networking gear to deliver custom malware and facilitate covert data collection on target environments.
Cisco Talos, which dubbed the activity ArcaneDoor, attributing it as the handiwork of a previously undocumented sophisticated state-sponsored actor it tracks under the name UAT4356 (aka Storm-1849 by Microsoft).
"”}]] Read More
The Hacker News | #1 Trusted Cybersecurity News Site
Hackers Launch Business Email Compromise attacks on The Automotive Industry
[[{“value”:”
The automotive industry is experiencing a surge in BEC and VEC attacks, a type of email scam designed to trick employees into transferring money or revealing sensitive information.
A recent incident where a fraudster stole $37 million from Toyota Boshoku by tricking an employee into changing bank account information for a wire transfer shows this rise in attacks.
Research suggests that BEC and VEC attacks are on the rise in general, but the automotive industry seems to be a particularly attractive target for cybercriminals.
The automotive industry is experiencing a surge in BEC and VEC attacks due to high-value transactions and complex supply chains with numerous vendors.
Implementing AI-Powered Protection for Business Email Security is an essential component in strengthening the defenses against sophisticated email attacks in the future and enhancing business email.
BEC attacks against automotive businesses rose by 70.5% between September 2023 and February 2024, while 63% of automotive industry customers encountered VEC attacks in the same period. These social engineering attacks bypass traditional security measures, making employees the primary defense.
Median Number of BEC Attacks per Week
According to Abnormal Security, attackers impersonate colleagues or vendors via spoofed emails or compromised accounts to trick targets into disclosing sensitive information or initiating unauthorized payments.
A social engineering attack, masquerading as a Business Email Compromise (BEC), targeted the accounts payable department of a truck dealership, impersonating the company president via email.
The email contained a fabricated invoice from a supposedly legitimate service provider and a forged authorization for payment remittance. An attack uses social engineering to bypass technical security measures by exploiting trust in the sender’s identity and urgency for processing the seemingly approved invoice.
Screenshot of Invoice
Legacy email security systems are failing to protect automotive organizations from Business Email Compromise (BEC) attacks due to a lack of advanced threat detection and social engineering tactics that exploit familiarity with trusted senders by spoofing email addresses and names.
Traditional email filters rely on identifying malicious attachments or URLs, which are absent in BEC attacks. Consequently, employees are more likely to fall victim to the deceptive nature of these emails.
It highlights the critical need for automotive organizations to implement more sophisticated security solutions to effectively address the evolving threat landscape.
Email-based attacks are on the rise in the auto industry, using social engineering to bypass traditional security solutions.
The attacks lack the usual red flags, like malicious attachments or suspicious URLs, rendering secure email gateways and other legacy tools ineffective, as the human element is now a critical vulnerability that needs to be addressed.
Email security leader Trustifi’s advanced artificial intelligence engines proactively scan your entire email environment and learn variable behavior patterns common with compromised accounts to stop advanced email-based attacks such as:
Business email compromise
Sophisticated phishing attacks
Advanced malware
CEO impersonation fraud
Spoofing attacks
Vendor email compromise
Account takeover and compromise
Behavioral anomalies
Basic and covert spam and graymail
Opt-in for AI-Powered Protection for Business Email Security You can stop inbound threats and block attackers from reaching User inboxes.
Looking to Safeguard Your Company from Advanced Cyber Threats? Deploy TrustNet to Your Radar ASAP.
The post Hackers Launch Business Email Compromise attacks on The Automotive Industry appeared first on Cyber Security News.
“}]] Read More
Cyber Security News
Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin Access
Cybersecurity researchers have disclosed a critical security flaw in the LiteSpeed Cache plugin for WordPress that could permit unauthenticated users to gain administrator privileges.
“The plugin suffers from an unauthenticated privilege escalation vulnerability which allows any unauthenticated visitor to gain Administrator level access after which malicious plugins could be uploaded and Read More
Cybersecurity Researchers Proposed Pre-trained LLM Agents Acting as Human Penetration Testers
LLMs have already shown their exceptional abilities in mimicking human text abilities, but their potential reaches further. They now show promise in planning and open-world exploration, hinting at broader horizons.
The Large Language Models (LLMs) also bring promise to cybersecurity, especially in automating penetration testing. However, besides this, combining LLMs with decision-making adds exciting possibilities.
The following cybersecurity researchers from their respective universities have recently unveiled that they are proposing the pre-trained LLM agents acting as human testers:-
Maria Rigaki (Czech Technical University in Prague)
Ondrej Lukas (Czech Technical University in Prague)
Carlos A. Catania (School of Engineering, National University of Cuyo)
Sebastian Garcia (Czech Technical University in Prague)
In NLP, the 2017 introduction of transformers was a game-changer, using self-attention for parallel sequence processing.
Transformers have encoders and decoders, with self-attention capturing word importance and positional encodings preserving order.
Early pre-trained models like GPT-3 struggled with reasoning, but using prompts and in-context learning improved this. Chain of Thought (CoT) and a simple prompt like “Let’s think step by step” were practical for logical reasoning tasks.
LLMs enhance network security by countering social engineering attacks like phishing, baiting, and tailgating through text analysis, detecting unusual communication patterns as potential threats.
Existing network security training environments for reinforcement learning lack consistency in the following elements:-
Network behavior
Goals
Defenders
Reward systems
These critical factors often lack detailed discussion or explanation, raising concerns about their real-world applicability.
NetSecGame (https://github.com/stratosphereips/NetSecGame) is an innovative simulated network security training ground and security environment with a defined topology, actions, goals, and code in a secret repository.
Apart from this, the NetSecGame has six main parts, and here below, we have mentioned those parts:-
Configuration
Action space
State space
Reward
Goal
Defensive agent.
NetSecGame employs two config files, and below, we have mentioned them:-
One for network topology
The other one is for RL behavior
Here below, we have mentioned all the network scenarios:-
State Representation
Action Representation
Reward Function
In RL, LLMs get state ‘𝑠𝑡,’ provide ‘𝑎𝑡,’ and receive rewards without extra learning. LLMs are assumed to be knowledgeable in network security, with no episode-to-episode learning.
Experts chose the “chain” scenario in CyberbattleSim, with 10 nodes, for LLM testing due to its complexity and distinct goal among the three baseline scenarios.
Here below, we have mentioned all the limitations:-
Hallucination
Invalid or repeated actions
Cost
Instability
Prompt creation
Learning
Despite LLM limitations, cybersecurity researchers see potential for high-level cybersecurity planning, and not only that even the future work should explore complex scenarios.
The post Cybersecurity Researchers Proposed Pre-trained LLM Agents Acting as Human Penetration Testers appeared first on Cyber Security News.
Cyber Security News