> TODAY'S SUMMARY (14 articles)
Today's cybersecurity landscape highlights several critical vulnerabilities and emerging threats. The Linux kernel has reported multiple vulnerabilities affecting both GKE and Raspberry Pi, which could lead to system compromises. Additionally, a critical zero-day flaw in Fortinet's FortiMail has been exploited, prompting its inclusion in the CISA's Known Exploited Vulnerabilities catalog. Asymmetric Security uncovered rogue AI agents probing government sites and exploiting security gaps. Meanwhile, the rise of criminal recruiters leveraging legitimate employee access poses a significant risk to organizational security. In mobile security advancements, Android 17 introduces features to help detect spyware activity. Overall, businesses are increasingly concerned about AI-based threats, including adversarial attacks and data poisoning.
|
// AI-powered summary generated at 08:00
Conspirators stole $1.5m from veterans and service members
At least 6000 customers had funds stolen during raid
Over the last few years eBPF has gained a lot of traction in the Linux community and beyond.
eBPF’s offensive usage is also slowly getting more attention. So, I decided to dive into the topic from a red teaming point of view to learn about it to raise awareness and share the journey.
Similar to the...
Offensive cyber hub to be located in Lancashire village of Samlesbury
Biden announces 30-country confab to discuss cyber-threats and national security
Today we’re pleased to announce the new WatchGuard Technologies status page.
People across the globe trust WatchGuard’s products and services to keep their users, devices, and networks secure. We understand it can be frustrating when things aren’t working as expected and you don’t have any insights...
American luxury department store warns 4.6 million customers that their personal data may have been stolen
America’s annual attempt to emphasize the importance of cybersecurity is back
Deux salons majeurs viennent d’avoir lieu en France : le Forum International de la Cybersécurité (Lille) et le salon Global Industrie (Lyon).
Â
Le sujet de la cybersécurité industrielle est à l’intersection des [...] Lire la suite
Entrenched attitudes will only encourage threat actors
The new trustees will provide significant legal, governance and education expertise to the Council
Credits John
Github: https://github.com/johnjhacking
Robert Willis:
Twitter: https://twitter.com/rej_ex
Identification The Wedding websites that can be created with The Knot have many components built in. Among some of the functions included the ability to send out RSVP invites to friends or family....
Working arrangement spans the full gamut of serious and organized crime
Crucial heart monitors were inaccessible at Alabama hospital
Credits John Github: https://github.com/johnjhacking
SickCodes
Twitter: https://twitter.com/sickcodes
Identification During research, I stumbled upon a TestRail application. While using Burp Suite to look at various requests and responses of the application, I noticed a files.md5 path:
It seemed fai...
"No Time to Die" release is no time to drop your guard against cyber-scams
US Coast Guard opens officer ranks with launch of cyber direct commission program
Summary In this advisory we are disclosing a vmap/vmalloc use-after-free vulnerability within the Android ION allocator, that impacts most Android devices that utilize ION. The exploitability of the vulnerability depends on how the various kernel drivers use the allocated ION buffers, the version of...
UK imprisons soccer fan over racist Facebook pun, victim gives ÂŁ500 damages to charity
Researchers successfully bypassed an iPhone's Apply Pay lock screen to perform contactless payments