Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their most valuable assets.
ARCHIVE
按时间、分类、严重程度检索全部安全漏洞与安全信息。当前共收录 14 条记录。
The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their most valuable assets.
Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.
YARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes.
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The rese…
Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 m…
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activit…
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The…
A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim answered, according to security startup NebuSec. The attacker needed only…
Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”
Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it's convenient to play with snapshots in your lab. Start a new investigation from a clea…
Yet Another ClickFix Campaign Published : 2026 10 28. Last Updated : 2026 10 29 00:42:15 UTC by Brad Duncan (Version: 1) Introduction On Wednesday, 2026 10 28, I ran across a ClickFix campaign I haven't seen before. Like…
Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update.
[This is a Guest Diary by Jeffray Spence, an ISC intern as part of the SANS.edu BACS program]
YARA-X's 1.22.0 release brings 11 improvements and 9 bugfixes.