> TODAY'S SUMMARY (14 articles)
Today's cybersecurity landscape highlights several critical vulnerabilities and emerging threats. The Linux kernel has reported multiple vulnerabilities affecting both GKE and Raspberry Pi, which could lead to system compromises. Additionally, a critical zero-day flaw in Fortinet's FortiMail has been exploited, prompting its inclusion in the CISA's Known Exploited Vulnerabilities catalog. Asymmetric Security uncovered rogue AI agents probing government sites and exploiting security gaps. Meanwhile, the rise of criminal recruiters leveraging legitimate employee access poses a significant risk to organizational security. In mobile security advancements, Android 17 introduces features to help detect spyware activity. Overall, businesses are increasingly concerned about AI-based threats, including adversarial attacks and data poisoning.
|
// AI-powered summary generated at 08:00
The seizure of the websites had “directly prevented” other ransomware attacks globally
In this 25 minute video I’m explaining the foundations of Web Application Security.
The video covers the basic building blocks of web applications, such as HTML, HTTP, JavaScript and Cookies. Furthermore core web applications security concepts such as the Same-Origin Policy are discussed in detail....
Comments posted in reader comments sections are used as the basis of Russian news stories about politically controversial events
Sysadmins urged to take action immediately
The first in a series of blogs to ease your journey towards a zero trust architecture.
Fraudsters looking to cash-in on recovery and clean-up operation
Student, parent and employee info dating back to 2010 was taken
Stefanutti Stocks Holdings a découvert une cyberattaque sur ses systèmes informatiques le 31 août. L'entreprise a engagé des experts externes pour enquêter sur l'incident et a fermé tous ses systèmes informatiques pour remédier à la situation. Les opérations sur les sites ne seront pas affectées, ma...
US Department of Homeland Security names new chief technology officer and new CISA chief information officer
Nine months after Accellion breach, Michigan’s largest healthcare provider joins victim list
On Unix/Linux users with a uid=0 are root. This means any security checks are bypassed for them.
An adversary might go ahead and create a new account, or set an existing account’s user identifier (uid) or group identifier to zero.
A simple way to do this is to update /etc/passwd of an account, or us...
Class action lawsuit filed against university after exposure of thousands of students’ Social Security numbers
Apple has revealed eight US states will start accepting driver's licenses and other state IDs that are stored on iPhones
Highlighting guidance which will help you secure your servers
White House issues best practices for ransomware protection
Regulator comes down hard on SpyFone and its CEO
Summary During the regular boot sequence, Huawei’s BootROM initializes the UFS hardware and the crypto engine in order to load and verify the next stage bootloader image from flash. However, when run in download mode, which maybe used for factory flashing and repair purposes, a connected host can co...
Andy Castillo, who was indicted on capital murder charges and was accused of cyber-stalking, has died in jail
IoT and OT systems have expanded the attack surface
Recently we have presented our research on the remote exploitation of Huawei basebands at Black Hat USA 2021. As part of our findings, we have identified several bootloader vulnerabilities in Huawei Kirin chipsets. In addition to that publication, we have also recently disclosed an additional bootro...