[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (7 articles)

|

// AI-powered summary generated at 04:00

> ICO Slaps ÂŁ250,000 Fine on Another Nuisance Call Company
Reliance Advisory Limited made millions of unsolicited calls
> Number of “Breached” Records Hits 36 Billion in 2020
Risk Based Security report shows drop in reported incidents
> Machine Learning Attack Series: Image Scaling Attacks
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts. Overview: How Husky AI was built, threat modeled and operationalized Attacks: Some of the attacks I want to investigate, learn about, and try out A few weeks ago wh...
> Scammers Spoof MAGA Hat Vendors to Steal $2.3m from Republicans
Wisconsin Republican Party appears to have been hit by a BEC attack
> BEC Attacks Targeting Energy and Infrastructure Rise by 93%
Overall BEC attacks grew by 15% in Q3 compared with Q2
> Leveraging the Blue Team's Endpoint Agent as C2
A few years back the Blue Team of a company asked to be targeted in a Red Team Operation. That was a really fun, because Rules of Engagement commonly prevent targeting Blue Teams. Blue’s infrastructure, systems and team members are often out of scope, unfortunately. Blue team infrastructure is a gol...
> US: Collaboration Needed to Combat Online Child Exploitation
US assistant attorney general calls for civil society to work together to combat online child exploitation
> Triple Data Breach Earns Insurer $1m Fine
Aetna agrees to pay $1m to settle three HIPAA breaches
> Account Takeover on the Jack Daniel's Tennessee Squire Association Platform
Summary Many people do not know about the Jack Daniel’s Tennessee Squires. The Squire Association is an Elite Club for “friends of Jack Daniel’s”. Anyone that has ever dreamed of being a Tennessee Squire knows how difficult - if not impossible it is to obtain membership without paying thousands of d...
> Taiwanese Company Admits Stealing US Trade Secrets
UMC fined $60m for stealing trade secrets of US semiconductor business
> Education Sector Facing Disproportionate Level of Spear-Phishing Attacks
Education institutions have been targeted by more than 3.5 million spear-phishing attacks from June to September
> CVE-2020-27388: YOURLS 1.5 - 1.7.10, Multiple Stored Cross Site Scripting (XSS) Vulnerabilities in Admin Panel
Potential Abuse on a hooked Function There is a potential for abuse with any plugins that implement the hook function ‘shunt_is_valid_user’. In the code below we simply demonstrate that authentication can be completely bypassed by returning TRUE in the hooked function. This would be an ideal place f...
> Employee Awareness Recognized as Biggest Lockdown Security Failing
Apricorn poll finds two-fifths of employees unprepared for remote working
> Red Alert as US Hospitals Are Flooded with Ryuk Ransomware
Six facilities hit in a single day, forcing patients to divert
> Efficient audits with machine learning and Slither-simil
Trail of Bits has manually curated a wealth of data—years of security assessment reports—and now we’re exploring how to use this data to make the smart contract auditing process more efficient with Slither-simil. Based on accumulated knowledge embedded in previous audits, we set out to detect simila...
> ICO Still Failing to Collect Fines from Unlawful Companies
Neary 70% of the total value of fines issued last year still outstanding
> UK Recruiting Youths for "Digital Army"
Urban regeneration project to train 200 young Brits in digital and cybersecurity skills
> Pourquoi le nouvel hameçonnage Emotet est-il aussi efficace ?
Le CERT-FR signale une recrudescence d’activitĂ© Emotet en France dans son bulletin d’alerte 2020-ALE-019. Il s’agit d’une nouvelle forme d’attaque : le dĂ©tournement des fils de discussion des courriels (email thread hijacking technique). Cette nouvelle forme d’attaque est particuliĂšrement [...] Li...
> Scammers "Seize" Trump Campaign Site
President Trump’s campaign site briefly defaced a week before election day
> Hackers Leak Swedish Security Firm's Data
Gunnebo customer data leaked online following attack on company’s servers