Posts

The Hacker News - Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container Isolation

Cybersecurity researchers have disclosed multiple security vulnerabilities within the Linux kernel's AppArmor module that could be exploited by unprivileged users to circumvent kernel protections, escalate to root, and undermine container isolation guarantees. The nine confused deputy vulnerabilities have been collectively codenamed CrackArmor by the Qualys Threat Research Unit (TRU). The from The Hacker News https://thehackernews.com/2026/03/nine-crackarmor-flaws-in-linux-apparmor.html

KnowBe4 - Email DLP: Everything You Need to Know

Image
What is Email Data Loss Prevention (DLP)? Traditionally, email data loss prevention software has used static rules to stop users from emailing sensitive or confidential data. Specifically, email DLP protects organizations from accidentally exposing sensitive data such as bank account numbers, passwords, credit card numbers, intellectual property, or trade secrets. from Human Risk Management Blog https://blog.knowbe4.com/email-dlp-everything-you-need-to-know

The Hacker News - Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays

Cybersecurity researchers have disclosed details of a new banking malware targeting Brazilian users that's written in Rust, marking a significant departure from other known Delphi-based malware families associated with the Latin American cybercrime ecosystem. The malware, which is designed to infect Windows systems and was first discovered last month, has been codenamed VENON by Brazilian from The Hacker News https://thehackernews.com/2026/03/rust-based-venon-malware-targets-33.html

The Hacker News - Hive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks

Cybersecurity researchers have disclosed details of a suspected artificial intelligence (AI)-generated malware codenamed Slopoly put to use by a financially motivated threat actor named Hive0163. "Although still relatively unspectacular, AI-generated malware such as Slopoly shows how easily threat actors can weaponize AI to develop new malware frameworks in a fraction of the time it used to take from The Hacker News https://thehackernews.com/2026/03/hive0163-uses-ai-assisted-slopoly.html

KnowBe4 - Exposing the Kroll Crypto Wallet Scam

Image
I’ve been contacted by the real Kroll (www.kroll.com) a few times over the last few years regarding various real class action lawsuits they are involved in, including as recently as a few months ago. So when I received the email below, although it seemed phishy from the start, it was relevant enough that I opened it. from Human Risk Management Blog https://blog.knowbe4.com/exposing-the-kroll-crypto-wallet-scam

The Hacker News - ThreatsDay Bulletin: OAuth Trap, EDR Killer, Signal Phishing, Zombie ZIP, AI Platform Hack & More

Another Thursday, another pile of weird security stuff that somehow happened in just seven days. Some of it is clever. Some of it is lazy. A few bits fall into that uncomfortable category of “yeah… this is probably going to show up in real incidents sooner than we’d like.” The pattern this week feels familiar in a slightly annoying way. Old tricks are getting polished. New research shows how from The Hacker News https://thehackernews.com/2026/03/threatsday-bulletin-oauth-trap-edr.html

KnowBe4 - How Do I Send a Secure Email in Outlook?

Image
Sending an unsecured email can be likened to writing sensitive information on a sticky note and leaving it on someone else's desk: anybody can intercept and share that information. Fortunately, there are ways to ensure your emails are safe from the prying eyes of hackers through encryption, meaning your message — no matter how sensitive — is seen only by the intended recipient. from Human Risk Management Blog https://blog.knowbe4.com/how-to-send-secure-email-outlook