IICyberSecurity

A new version of Metasploit, called Metasploit 6.5, has introduced an important feature that allows AI assistants to interact directly with the Metasploit penetration-testing framework. This development could make security testing much faster and easier. However, it also creates new security risks because attackers could potentially use AI to find vulnerabilities and launch attacks with less manual effort. What is Metasploit? Metasploit is a well-known security testing framework.

Cybercriminals are always looking for new ways to trick people into installing malware. A new campaign discovered in Brazil shows how attackers are now using WhatsApp to spread the well-known Astaroth banking Trojan. Security researchers from Acronis named this campaign Boto Cor-de-Rosa. Instead of sending phishing emails, the attackers use messages that appear to come from someone the victim already knows, making the attack much more convincing.

Artificial Intelligence (AI) is changing many industries, and cybersecurity is no exception. A recent example is a GitHub repository called Exploitarium, created by an anonymous security researcher using the nickname Bikini. The repository contains proof-of-concept (PoC) exploits and descriptions of security vulnerabilities found in popular software used by millions of people around the world.

Imagine having a team of expert cybersecurity professionals working around the clock to inspect software for security weaknesses. Now imagine that team is made up of AI assistants that can work together, share information, and produce detailed reports in a fraction of the time. This is the idea behind T3MP3ST, an open-source framework that is changing the way security researchers test software.

Artificial Intelligence is no longer just a tool that answers questions, writes code, or generates images. We are entering an era where AI is beginning to help build the next generation of AI. At first glance, this may sound like another technological advancement, but its long term implications could be as transformative as the invention of electricity or the internet.

Organizations spend a lot of money on firewalls, antivirus software, EDR solutions, and SIEM platforms. However, attackers still find ways to communicate with compromised systems inside a network. What if there was a lightweight, open-source tool that could monitor network traffic and alert you whenever a device tries to communicate with known malicious IP addresses, domains, or URLs? This is exactly what Maltrail does. Maltrail is an open-source malicious traffic detection system.

A website can now figure out what other tabs and apps you have open – without any camera, microphone, or malicious extension. Just ordinary JavaScript and a clever trick with your storage drive. FROST stands for Fingerprinting Remotely using OPFS-based SSD Timing. In plain words  – a sneaky website can quietly watch how busy your computer’s storage drive is, and from that, guess what other websites or apps you have open. As per researcher of Security Newspaper, in this attack – No camera.

Now you can get ADMIN access on Windows by exploiting old Windows Fax Service to gain full SYSTEM level access on a machine. By combining a UAC bypass technique with malicious Fax Service Provider registration, the attack tricks Windows into loading a rogue DLL inside a trusted service running with very high privileges. In this article, we break down the complete attack flow on how the Windows Fax Service is manipulated to execute attacker controlled code as SYSTEM.

A new cybersecurity tool is creating serious concern among IT and security teams. Unlike ransomware, this tool does not encrypt files, delete data, or install malware. Instead, it abuses a normal Windows feature to lock files so employees and applications cannot open them. The dangerous part is that even a normal domain user with basic read access can potentially disrupt access to thousands of company files within minutes. Windows has a normal feature called CreateFileW.

AI-Powered Automated Cybersecurity Threat Detection Platform Watcher is a Django & React JS platform designed to discover and monitor emerging cybersecurity threats with AI-powered threat intelligence analysis. It can be deployed on webservers or quickly run via Docker.