Chinese bank in US hit by ransomware attack

The Industrial and Commercial Bank of China’s (ICBC) U.S. arm was hit by a ransomware attack that disrupted trades in the U.S. Treasury market on Thursday, the latest in a string of victims ransom-demanding hackers have claimed this year. According to Reuters*, ICBC Financial Services, the U.S. unit of China’s largest commercial lender by assets, … More Chinese bank in US hit by ransomware attack

WhatsApp can now hide your IP address during calls for added security

Calls on WhatsApp are (optionally) getting even more secure for the app’s most privacy-minded users. According to The Verge* WhatsApp just added a new “protect IP address in calls” toggle to its settings that shields your IP from whoever’s on the other side of a call. When activated, calls will be relayed through Meta / … More WhatsApp can now hide your IP address during calls for added security

Fake Ledger Live app in Microsoft Store steals $768,000 in crypto

Microsoft has recently removed from its store a fraudulent Ledger Live app for cryptocurrency management after multiple users lost at least $768,000 worth of cryptocurrency assets, writes Bleeping Computer*. Published with the name Ledger Live Web3, the fake application appears to have been present in the Microsoft Store since October 19, but the cryptocurrency theft … More Fake Ledger Live app in Microsoft Store steals $768,000 in crypto

Google Warns How Hackers Could Abuse Calendar Service

Google is warning of multiple threat actors sharing a public proof-of-concept (PoC) exploit that leverages its Calendar service to host command-and-control (C2) infrastructure. According to The Hacker News*, the tool, called Google Calendar RAT (GCR), employs Google Calendar Events for C2 using a Gmail account. It was first published to GitHub in June 2023. “The … More Google Warns How Hackers Could Abuse Calendar Service

Navigating the security and privacy challenges of large language models

Organizations that intend to tap the potential of LLMs must also be able to manage the risks that could otherwise erode the technology’s business value. Everyone’s talking about ChatGPT, Bard and generative AI as such. But after the hype inevitably comes the reality check. While business and IT leaders alike are abuzz with the disruptive … More Navigating the security and privacy challenges of large language models