Iranian Cyber Group Cotton Sandstorm Expands Targeting with AI Tools

The Iranian state-sponsored threat actor Cotton Sandstorm, also known as Emennet Pasargad, is utilizing advanced AI tactics to broaden its cyber operations beyond Israeli organizations to include targets in the US, France, and Sweden, while preparing for influence operations related to the upcoming US Presidential Election and the 2024 Paris Olympics.

qBittorrent Fixes 14-Year-Old Security Vulnerability

qBittorrent has resolved a critical remote code execution vulnerability, CVE-2024-51774, stemming from improper SSL/TLS certificate validation, which had exposed users to potential man-in-the-middle attacks for over 14 years.