Cybersecurity

Conveyor raises $12.5M to automate security reviews using LLMs | TechCrunch

In a perfect world, companies would vet the security and compliance of every third-party vendor they use. Sales wouldn’t close until these reviews are complete. The trouble is, security reviews require a massive investment of time — and labor. Questionnaires — the main way companies vet vendors — contain hundreds of questions, covering everything from […]

Cybersecurity

Indian state government fixes website bug that revealed Aadhaar numbers and fingerprints | TechCrunch

A security researcher says a bug on an Indian state government website inadvertently revealed documents containing residents’ Aadhaar numbers, identity cards, and copies of their fingerprints. The bug was fixed last week after the security researcher disclosed the bug to local authorities. Sourajeet Majumder found the bug in the West Bengal government’s e-District web portal […]

Cybersecurity

Void Rabisu Targets Female Political Leaders with New Slimmed-Down ROMCOM Variant

Void Rabisu is an intrusion set associated with both financially motivated ransomware attacks and targeted campaigns on Ukraine and countries supporting Ukraine. Among the threat actor’s previous targets were the Ukrainian government and military, their energy and water utility sectors, EU politicians, spokespersons of a certain EU government, and security conference participants. In campaigns conducted […]

Cybersecurity

Vietnam Accused of Using Predator to Spy on EU, US Lawmakers

Cyberwarfare / Nation-State Attacks , Endpoint Security , Fraud Management & Cybercrime Social Media Account Used to Spread Links to Commercial Spyware Malware Mihir Bagwe (MihirBagwe) • October 11, 2023     Image: Shutterstock Amnesty International says the Vietnamese government is likely behind a wave of attempted Predator spyware infections against targets including members of […]