Cybersecurity researchers warn of a sophisticated ransomware attack that uses a Python-based backdoor for persistent access to compromised networks, deploying RansomHub ransomware. The initial access is facilitated by JavaScript malware SocGholish, distributed via browser update scams, often through infected websites. The Python script has been observed since December 2023. Other precursor tools disable endpoint detection, steal credentials, brute-force email accounts, and deliver more payloads.
Biden Administration proposes framework for AI chip exports
The Biden Administration has put forth guidelines for exporting AI chips, and security experts are discussing their opinions on the matter.