> TODAY'S SUMMARY (84 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The rise of deepfakes and voice cloning poses significant challenges for user identity verification, especially in sensitive environments. A recent drone strike on VK's data center has led to service disruptions, while Drupal warns of a rapidly exploitable RCE flaw in its core systems. Additionally, a supply chain attack compromised the Rank Math PRO WordPress plugin, injecting malware into legitimate updates. The U.S. Department of Homeland Security has issued a ban on DeepSeek due to national security concerns, emphasizing the ongoing risks associated with data transmission to foreign servers. Furthermore, the alarming statistic from Moody's reveals that known exploited vulnerabilities take an average of 87 days to patch, underscoring the urgent need for improved response strategies in cybersecurity.
|
// AI-powered summary generated at 16:01
Session 7D: ML Security
Authors, Creators & Presenters: Rui Wen (CISPA Helmholtz Center for Information Security), Michael Backes (CISPA Helmholtz Center for Information Security), Yang Zhang (CISPA Helmholtz Center for Information Security)
PAPER
Understanding Data Importance in Machine Learni...
The campaign has been attributed to APT36, also known as Transparent Tribe, a long-running threat actor accused of spying on Indian government bodies, military-linked organizations and universities.
The Covenant Health organization has revised to nearly 500,000 the number of individuals affected by a data breach discovered last May. [...]
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision constatant une infraction à l'encontre de la Direction Générale de la Police (DGP) pour des manquements liés à la sécurité d'un traitement de données personnelles.Cette affaire débute par la notification d'une violation de don...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de l'opérateur DIGI SPAIN TELECOM, S.L., comprenant une amende de 140 000 €, pour des manquements liés à l'émission frauduleuse d'un duplicata de carte SIM.Cette affaire a pour origine une plainte dépo...
Regulators in Europe are weighing taking action against Elon Musk’s social media platform X after its artificial intelligence tool Grok was used to create sexually explicit images of a minor.
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de FLEXICAR INTERNACIONAL, S.L., comprenant le prononcé d'une amende de 40 000 €, pour des manquements en lien avec le principe de confidentialité des données personnelles.Cette affaire débute par la...
For the bargain price of 6.5 bitcoin A cybercrook claims to have breached Pickett and Associates, a Florida-based engineering firm whose clients include major US utilities, and is selling what they claim to be about 139 GB of engineering data about Tampa Electric Company, Duke Energy Florida, and Am...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Chessboard Alignment’ appeared first on Security Boulevard.
The claims administration company Sedgwick confirmed that a subsidiary that contracts with a handful of sensitive federal agencies is dealing with a cybersecurity incident.
Blockchain investigation firm TRM Labs says ongoing cryptocurrency thefts have been traced to the 2022 LastPass breach, with attackers draining wallets years after encrypted vaults were stolen and laundering the crypto through Russian exchanges. [...]
European Space Agency Confirms Cyber Breach After Hacker Claims System Access The European Space Agency acknowledged a security incident involving servers outside its corporate network after a threat actor known as ‘888’ claimed on BreachForums to have accessed ESA systems for approximately one week...
Un développeur présumé d’un kit de phishing "as a service" RaccoonO365 arrêté après des renseignements venus de Microsoft et d’agences américaines. Derrière l’interpellation, une économie criminelle structurée....
Jacob Riggs is set to swap London for Sydney some time in the next year A British security researcher has secured Australia's strictest, invite-only visa after discovering a critical vulnerability in a government system.…
Ploutus : 54 pirates de distributeurs de billets arrêtés. Le gang Tren de Aragua montré du doigt....
Modern software teams are under pressure to move fast, innovate faster, and deliver continuously. At the same time, attackers are evolving just as quickly, and in many cases, faster than the tools meant to stop them.
The post Outpace Malware, Build Faster, and Secure Software With Real-Time Pr...
Over 10,000 Internet-exposed Fortinet firewalls are still vulnerable to attacks exploiting a five-year-old two-factor authentication (2FA) bypass vulnerability. [...]
The three Iranians had only just been added to the list in 2024, but a U.S. official said they had separated themselves from the company.
The post Treasury removes Intellexa spyware-linked trio from sanctions list appeared first on CyberScoop.
Session 7D: ML Security
Authors, Creators & Presenters: Qi Xia (University of Texas at San Antonio), Qian Chen (University of Texas at San Antonio)
PAPER
AlphaDog: No-Box Camouflage Attacks via Alpha Channel Oversight
Traditional black-box adversarial attacks on computer vision models face sign...
Nefilim : un affilié plaide coupable à New York, risque 10 ans de prison. La justice offre 11 millions pour attraper un complice....