> TODAY'S SUMMARY (5 articles)
Today's cybersecurity news highlights several critical issues. OpenAI has acknowledged unauthorized access attempts to four Australian government websites, involving security bypass methods and the use of exposed keys. Citrix has issued patches for actively exploited zero-day vulnerabilities in its NetScaler products, following unofficial warnings that left many users vulnerable. Additionally, Ubuntu is addressing critical regression security issues in curl, which could pose risks to users of version 14.04 LTS. In a positive development, Nvidia launched the Open Agent Safety Platform to enhance governance of agentic AI systems, combining software and hardware for improved monitoring. Overall, the day underscores the ongoing challenges of security vulnerabilities and the need for timely patching.
|
// AI-powered summary generated at 04:00
New research shows 55% of organizations became phishing victims in 2019
Over 642 brilliant cryptographic minds gathered for Real World Crypto 2020, an annual conference that brings together cryptographic researchers with developers implementing cryptography in the wild. Overall, RWC 2020 was an impressive conference that demonstrated some amazing work. Here we explore t...
Campaign takes users to scam sites, says Sucuri
Misconfigured S3 bucket to blame, says vpnMentor
On Tuesday, the NSA announced they had found a critical vulnerability in the certificate validation functionality on Windows 10 and Windows Server 2016/2019. This bug allows attackers to break the validation of trust in a wide variety of contexts, such as HTTPS and code signing. Concerned? Get the i...
Amazon boss was allegedly sent spyware by crown prince
Brazilian prosecutors accuse US journalist Glenn Greenwald of involvement with a phone-hacking gang
Cyber-criminals flock to fake industrial company honeypot
Rise in UK Facebook-linked crime as government introduces stricter social media code of conduct
Move would have severely hampered investigations
Data leak was the result of misconfigured Elasticsearch databases
Regulator has yet to punish industry for illegal real-time bidding practices
Donation will provide employee security awareness training, create scholarships and help to develop the university’s cybersecurity program
Bureau Veritas Marine & Offshore reports rise in applicants for "Cyber Managed" notation
Founder of BackConnect Security paid a DDoS-for-hire service to launch cyber-attacks
Police Scotland is using Cellebrite machines to retrieve data from locked devices
China SAR looks for inspiration following Cathay Pacific breach
Betting firms were reportedly allowed access to trove
CISA and Microsoft sound the alarm but no patch as yet
Senate considers bill to create state cybersecurity leaders