Blog

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

LabubaRAT, a previously undocumented Rust-based remote access tool (RAT) masquerading as NVIDIA software that enables post-compromise operations on Windows systems, has been uncovered by Blackpoint Cyber. According to researchers, LabubaRAT creates “a reusable foothold for hands-on activity.” Once deployed, it can profile the host, identify installed security tools, receive operator commands, transfer files, capture screenshots, and proxy network traffic through the affected system. Blackpoint Cyber named the malware LabubaRAT after discovering a “LabubaPanel” title and … More → The post LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software appeared first on Help Net Security.
http://news.poseidon-us.com/TTYBt4

Threat actor impersonated hundreds of brands on GitHub to push infostealer malware

A financially motivated threat actor is impersonating hundreds of brands on GitHub and pushing a smash-and-grab infostealer masquerading as legitimate downloads of popular software, Arctic Wolf threat researchers have warned. “The 292 impersonated repositories span security tooling, fintech and personal finance, cryptocurrency wallets and exchanges, developer and productivity tools, secure email providers, macOS utilities, and gaming software, including ‘cheat’ tools,” they said. How the attack works Among these repositories was one impersonating Arctic Wolf, which … More → The post Threat actor impersonated hundreds of brands on GitHub to push infostealer malware appeared first on Help Net Security.
http://news.poseidon-us.com/TTYBkK

Socure rolls out Remote Verifier for higher-risk identity checks

Socure has launched Remote Verifier in RiskOS, a new identity verification tool that helps organizations verify identities requiring additional review while reducing manual effort. Socure’s AI-powered document verification solution instantly verifies more than 99% of identities on the first try, compared to an industry average of 64%. The Remote Verifier is designed for individuals who do not initially pass Socure’s document verification check. With verification accuracy, the company anticipates fewer than 1% of individuals will … More → The post Socure rolls out Remote Verifier for higher-risk identity checks appeared first on Help Net Security.
http://news.poseidon-us.com/TTYBkD

Xint Pulse offers on-demand black-box penetration testing for web applications

Xint.io has launched Xint Pulse, a black-box autonomous penetration testing tool that provides product security teams with on-demand security assessments of their applications. Unlike the company’s enterprise platform, which is designed for continuous testing, Xint Pulse is intended for timely, one-off penetration tests. But with Xint Pulse, organizations of all sizes, from startups to large enterprises, can now perform a scan of their applications with the same Xint technology that was named Best Automated Pentesting … More → The post Xint Pulse offers on-demand black-box penetration testing for web applications appeared first on Help Net Security.
http://news.poseidon-us.com/TTYBk7

F5 Insight for ADSP enhances BIG-IP operations with guided updates and AI audit trails

F5 has announced new fleet management capabilities for F5 Insight for ADSP that help enterprises reduce risk exposure across F5 BIG-IP environments as frontier AI compresses vulnerability response timelines. The new F5 Insight workflows give security and operations teams fleet-wide visibility, guided update management, enterprise authentication, role-based access controls, and a tamper-evident AI audit trail. This enables customers to move from identifying risk to taking accountable action across large, distributed application delivery and security fleets. … More → The post F5 Insight for ADSP enhances BIG-IP operations with guided updates and AI audit trails appeared first on Help Net Security.
http://news.poseidon-us.com/TTYBhw

Radware adds cloud intelligence to DefensePro X for web DDoS defense

Radware has announced a new cloud-augmented protection architecture for DefensePro X, extending the platform with new AI-powered cloud algorithms while keeping traffic inspection and mitigation locally within customer premises. The first such service released is Cloud Web DDoS Protection for DefensePro X designed to improve characterization and real time footprint generation of sophisticated application-layer distributed denial-of-service (DDoS) attacks without requiring organizations to reroute traffic through the cloud. Web DDoS attacks continue to evolve as attackers … More → The post Radware adds cloud intelligence to DefensePro X for web DDoS defense appeared first on Help Net Security.
http://news.poseidon-us.com/TTY2j0