> TODAY'S SUMMARY (1 articles)
Today's cybersecurity landscape highlights several key trends and threats. Ransomware attacks continue to proliferate, with an emphasis on targeting critical infrastructure and healthcare sectors. Phishing remains a significant concern, leveraging social engineering tactics to exploit remote work vulnerabilities. Additionally, the rise of supply chain attacks underscores the need for enhanced security measures across third-party vendors. Zero-day vulnerabilities are being actively exploited, prompting organizations to prioritize patch management. Finally, the importance of cybersecurity awareness training is emphasized as a critical defense against human error.
|
// AI-powered summary generated at 04:00
Recorded Future warns of growing security threat for multi-nationals
Cloud migration headache hits popular parenting site
Each year, Trail of Bits runs a month-long winter internship “winternship” program. This year we were happy to host 4 winterns who contributed to 3 projects. This is the first in a series of blog posts covering the 2019 Wintern class. Our first report is from Vaibhav Sharma (@vbsharma), a PhD studen...
Passwords of politicians reset as a precaution
Man receives fine after refusing to be scanned
Alex Groce, Associate Professor, School of Informatics, Computing and Cyber Systems, Northern Arizona University Mutation Testing Introducing one bug by hand (as we did in Part 1) is fine, and we could try it again, but “the plural of anecdote is not data.” However, this is not strictly true. If we...
When viewed on mobiles, the tactic adds authenticity
Experts warn patches could take weeks to issue
Alex Groce, Associate Professor, School of Informatics, Computing and Cyber Systems, Northern Arizona University Using DeepState, we took a handwritten red-black tree fuzzer and, with minimal effort, turned it into a much more fully featured test generator. The DeepState fuzzer, despite requiring no...
Banking trojans significantly overtake ransomware in email-bound threats
Comparitech studied 60 nations to gauge their ability to meet key security criteria
C++ programs using exceptions are problematic for binary lifters. The non-local control-flow “throw” and “catch” operations that appear in C++ source code do not map neatly to straightforward binary representations. One could allege that the compiler, runtime, and stack unwinding library collude to...
Agari warns cyber-criminals are abusing email account registration process
Rapid7 and Recorded Future reveal another major APT10 campaign
On December 12, over 150 attendees joined a special, half-day Empire Hacking to learn about pitfalls in smart contract security and how to avoid them. Thank you to everyone who came, to our superb speakers, and to BuzzFeed for hosting this meetup at their office. Watch the presentations again It’s h...
Eskom was leaking customer data as employee suffered trojan infection
New survey explores ethical data use and consumer perceptions of data privacy
Huaxia Bank employee stole $1m from cashpoints
Tory whip tells users to ignore messages
DLA Piper warns fines could reach into the hundreds of millions this year