> TODAY'S SUMMARY (13 articles)
Today's cybersecurity news highlights several critical developments. A nationwide U.S. aviation ground stop was linked to legacy communications equipment during upgrades, with no evidence of hacking found. The U.S. CISA has added high-severity vulnerabilities in UnrealIRCd and Check Point to its Known Exploited Vulnerabilities catalog. The rise of AI in cybersecurity raises concerns about overreliance potentially stifling creativity and critical thinking in security teams. Additionally, AI tools are being utilized by unsophisticated attackers to enhance ransomware threats. A data breach at TSMC has resulted in the exposure of 46,000 employee records, with attackers demanding a ransom in Bitcoin. Overall, organizations must remain vigilant against evolving threats and the implications of emerging technologies.
|
// AI-powered summary generated at 16:00
Authors: Axel Boesenach and Erik Schamper In this blog post we will go into a user-friendly memory scanning Python library that was created out of the necessity of having more control during memory scanning. We will give an overview of how this library works, share the thought process and the why’s....
Authors: Axel Boesenach and Erik Schamper In this blog post we will go into a user-friendly memory scanning Python library that was created out of the necessity of having more control during memory scanning. We will give an overview of how this library works, share the thought process and the why’s....
The Zero Day Initiative’s first Pwn2Own Automotive competition has handed out over $1m for 24 zero-days
Authors: Axel Boesenach and Erik Schamper In this blog post we will go into a user-friendly memory scanning Python library that was created out of the necessity of having more control during memory scanning. We will give an overview of how this library works, share the thought process and the why’s....
Hewlett Packard Enterprise reveals that Russian state APT29 hackers stole data from corporate mailboxes
CounterCraft's co-founder, Dan Brett, explains how they turn the tables so that social engineering can be used to protect organisations from attackers.
La mairie de Santa Cruz do Sul a été victime d'une cyberattaque qui a affecté son réseau informatique, entraînant l'interruption des services de téléphonie et d'internet dans plusieurs de ses départements. En conséquence, le site web de la mairie est hors ligne et les inscriptions pour le processus...
Group Health Cooperative of South Central Wisconsin a alerté ses membres d'un "événement potentiel de cybersécurité", qui a contraint l'assureur santé à fermer certains de ses services en ligne et informatiques. Bien que l'événement ait été rapidement identifié, GHC a sécurisé tous ses systèmes info...
Kaspersky said cybercriminals are exploring schemes to implement ChatGPT in malware development
Finding comes from Menlo Security’s recently released 2023 State of Browser Security Report
At Trail of Bits, we pride ourselves on making our best tools open source, such as Slither, PolyTracker, and RPC Investigator. But while this post is about open source, it’s not about our tools… In 2023, our employees submitted over 450 pull requests (PRs) that were merged into non-Trail of Bits rep...
As a critical infrastructure service for cybercriminals, bulletproof hosting should be tracked and blocked by defenders, Intel471 argued in a new blog post
X (formerly Twitter) has announced that passkeys are available as a login option for US-based users on iOS following a spate of high-profile account hijacks
Le gouvernement du comté de Washington en Pennsylvanie a été ciblé par des pirates informatiques, entraînant une fermeture préventive de leurs serveurs suite à un avertissement de sécurité reçu de la part des responsables de la sécurité intérieure. Bien que le système 911 du comté soit resté opérati...
Researchers have released exploit code for a critical bug in managed file transfer software Fortra GoAnywhere
The National Cyber Security Centre claims in a new report that AI will increase volume and impact of ransomware attacks
L'école Misbourne a été contrainte de fermer en raison d'une cyberattaque qui a compromis certains de ses systèmes informatiques, affectant l'infrastructure et les opérations. L'établissement sera partiellement fermé le vendredi 26 janvier, avec des cours à distance pour certains niveaux, et espère...
Une cyberattaque, avec rançongiciel, a paralysé les systèmes informatiques du Centre de coordination des services de communication en santé (CCSC), affectant les services ambulanciers dans plusieurs régions, dont la Capitale-Nationale, le Saguenay-Lac-St-Jean et le Nord-du-Québec. Les appels d'urgen...
ReversingLabs noted a 1300% surge in harmful open-source packages between 2020 and 2023
Les systèmes de Global Affairs Canada ont été compromis lors d'une violation de données, avec des indications préliminaires d'un "accès non autorisé aux informations personnelles des utilisateurs, y compris des employés". Des mesures sont prises pour protéger les informations sensibles et la sécurit...