> TODAY'S SUMMARY (54 articles)
Today's cybersecurity landscape highlights several key threats and trends. Apple has introduced Secure Exclaves to enhance the protection of camera and microphone data while processing. Google released a second Chrome update this week to patch vulnerabilities that could enable code execution by attackers. Phishing attacks in Europe are surging at a rate significantly higher than the global average, increasing by 4.5 times year-over-year. Law enforcement agencies arrested 354 individuals in a major crackdown on dark web criminal activities, while operations targeting malicious infrastructures like Gootloader and CastleRAT have disrupted significant cybercrime networks. Additionally, critical vulnerabilities in systems like Check Point and Citrix have been exploited, emphasizing the ongoing risk of zero-day flaws. The recent worldwide outage of Microsoft 365 has raised alarms about potential exploitation by cybercriminals during this disruption.
|
// AI-powered summary generated at 12:00
Cellebrite can apparently extract data from most Pixel phones, unless they're running GrapheneOS.
OpenAI on Thursday launched Aardvark, an artificial intelligence (AI) agent designed to autonomously detect and help fix security vulnerabilities in software code, offering defenders a potentially valuable tool against malicious hackers. The GPT-5-powered tool, currently in private beta, represents...
Your regular browser may not be secure enough for modern threats, enterprise browsers can help.
The post Enterprise browsers – when your regular browser’s security just isn’t good enough appeared first on SecureIQ Lab.
The post Enterprise browsers – when your regular browser’s security just isn’t go...
libxml2 could be made to crash or run programs if it opened a specially crafted file.
Near-Field Communication (NFC) relay malware has grown massively popular in Eastern Europe, with researchers discovering over 760 malicious Android apps using the technique to steal people's payment card information in the past few months. [...]
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Jean-Claude Graf, Sandro RĂĽegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to e...
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
CISA has ordered federal agencies to patch a high-severity vulnerability in Broadcom's VMware Aria Operations and VMware Tools software, exploited by Chinese hackers since October 2024. [...]
Leonardo Giovanni discovered that missing redaction of authentication data in the Squid proxy caching server could result in information disclosure.
Jean-Claude Graf, Sandro RĂĽegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to e...
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Expired security cert, real Brussels agenda, plus PlugX malware finish the job Cyber spies linked to the Chinese government exploited a Windows shortcut vulnerability disclosed in March – but that Microsoft hasn't fixed yet – to target European diplomats in an effort to steal defense and national se...
Ribbon Communications, a provider of telecommunications services to the U.S. government and telecom companies worldwide, revealed that nation-state hackers breached its IT network as early as December 2024. [...]
Jean-Claude Graf, Sandro RĂĽegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to e...
SESSION Session 1C: Privacy & Usability 1
Authors, Creators & Presenters: Jiawei Li (Beihang University & National University of Singapore), Jiahao Liu (National University of Singapore), Jian Mao (Beihang University), Jun Zeng (National University of Singapore), Zhenkai Liang (National...
6 min readLearn when to use 2-legged vs 3-legged OAuth flows for your authentication needs. Discover security vulnerabilities, implementation patterns, and how Workload Identity Federation eliminates credential risks.
The post 2-Legged vs 3-Legged OAuth: Which Flow Fits Your Use Case? appeared fir...
Service will tell on compromised organizations, even if they didn't plan on doing so themselves Some orgs would rather you not know when they've suffered a cyberattack, but a new platform from privacy-focused tech firm Proton will shine a light on the big breaches that might otherwise stay buried.…