Episode #71: ChatGPT Zero Click Flaw, AI Powered Malware, & US Federal Agency Breach

This week has been crazy when it comes to cybersecurity news, with major attacks and critical vulnerabilities making headlines. In this episode, we're breaking down all of the most impactful stories of this week:

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are chaining two high-severity Ivanti EPMM flaws together to gain initial access to systems and deploy malware.

Boyd Gaming Corporation, a U.S. casino company, confirmed it suffered a cyberattack where unauthorized parties accessed its IT system and stole sensitive data belonging to employees and other individuals.

A zero-click, server-side vulnerability in ChatGPT's Deep Research agent, called "ShadowLeak," allows attackers to covertly steal sensitive data from OpenAI servers without any user interaction or visible signs of a breach.

The EU's cybersecurity agency confirmed a ransomware attack on Collins Aerospace's passenger processing system caused hundreds of flight cancellations and delays across European airports.

Cybersecurity researchers have discovered an AI-powered malware generator called MalTerminal, which uses OpenAI's GPT-4 to create ransomware or reverse shell code in real time, making it difficult for traditional security tools to detect.

A threat actor claims to have breached American Income Life (AIL), stealing and posting sensitive data online for free from approximately 150,000 people, including names, contact details, and insurance policy information.

Attackers breached a U.S. federal agency in mid-July 2024 by exploiting a critical vulnerability in GeoServer, subsequently deploying the China Chopper web shell to maintain remote access and move across the network.

Stay tuned for a deep dive into these cybersecurity threats, plus tips on how to stay safe online. Hit that subscribe button and turn on notifications so you don't miss future episodes!

#cybersecurity #ransomware #phishing #cyberattacks #databreach #cybercrime #infosec #dataprotection #cybersecurityawareness #cybersecuritynews

Видео Episode #71: ChatGPT Zero Click Flaw, AI Powered Malware, & US Federal Agency Breach канала CalmCoding