Lifeboat Foundation

Rockstar 2FA phishing kit bypasses MFA, stealing Microsoft 365 credentials via AitM attacks and trusted platforms.

Free ebook #freeisgood — 50th Anniversary Edition ~ Thomas S. Kuhn.

Pdf…

“One of the most influential books of the 20th century,” the landmark study in the history of science with a new introduction by philosopher Ian Hacking (Guardian, UK).First published in 1962, Thomas Kuhn’s The Structure of Scientific Revolutions” reshaped our understanding of the scientific enterprise and human inquiry in general.” In it, he challenged long-standing assumptions about scientific progress, arguing that transformative ideas don’t arise from the gradual process of experimentation and data accumulation, but instead occur outside of “normal science.” Though Kuhn was writing when physics ruled the sciences, his ideas on how scientific revolutions bring order to the anomalies that amass over time in research experiments are still instructive in today’s biotech age (Science).

Continue reading “The Structure of Scientific Revolutions” »

T-Mobile thwarts cyber intrusion from wireline provider’s network, ensuring no data breach or service disruption.

APT-C-60 exploits WPS Office flaw to deliver SpyGlace malware via phishing, targeting Japan with advanced techniques.

While LLMs are trained on massive, diverse datasets, SLMs concentrate on domain-specific data. In such cases, the data is often from within the enterprise. This makes SLMs tailored to industries or use cases, thereby ensuring both relevance and privacy.

As AI technologies expand, so do concerns about cybersecurity and ethics. The rise of unsanctioned and unmanaged AI applications within organisations, also referred to as ‘Shadow AI’, poses challenges for security leaders in safeguarding against potential vulnerabilities.

Predictions for 2025 suggest that AI will become mainstream, speeding up the adoption of cloud-based solutions across industries. This shift is expected to bring significant operational benefits, including improved risk assessment and enhanced decision-making capabilities.

INTERPOL arrests 1,006 in Africa, dismantling 134,089 cybercrime networks and saving $193M from online fraud.

Matrix botnet campaign exploits IoT flaws to target global IPs and CSPs with DDoS-for-hire services.

Two critical security flaws impacting the Spam protection, Anti-Spam, and FireWall plugin WordPress could allow an unauthenticated attacker to install and enable malicious plugins on susceptible sites and potentially achieve remote code execution.

The vulnerabilities, tracked as CVE-2024–10542 and CVE-2024–10781, carry a CVSS score of 9.8 out of a maximum of 10.0. They were addressed in versions 6.44 and 6.45 released this month.

Installed on over 200,000 WordPress sites, CleanTalk’s Spam protection, Anti-Spam, FireWall plugin is advertised as a “universal anti-spam plugin” that blocks spam comments, registrations, surveys, and more.

RomCom exploits Firefox and Windows zero-day flaws to deliver malware via fake websites in Europe and North America.