> TODAY'S SUMMARY (1 articles)
Today's cybersecurity landscape highlights several key trends and threats. Ransomware attacks continue to proliferate, with an emphasis on targeting critical infrastructure and healthcare sectors. Phishing remains a significant concern, leveraging social engineering tactics to exploit remote work vulnerabilities. Additionally, the rise of supply chain attacks underscores the need for enhanced security measures across third-party vendors. Zero-day vulnerabilities are being actively exploited, prompting organizations to prioritize patch management. Finally, the importance of cybersecurity awareness training is emphasized as a critical defense against human error.
|
// AI-powered summary generated at 04:00
More than half of users think their accounts are safer than the average users.
Government is looking for innovative ideas from British firms
Each year, Trail of Bits runs a month-long winter internship “winternship” program. This year we were happy to host 4 winterns who contributed to 3 projects. This is the first in a series of blog posts covering the 2019 Wintern class. Our first report is from Vaibhav Sharma (@vbsharma), a PhD studen...
Customers may have been exposed for over 17 months
European Commission issues RAPEX alert
Alex Groce, Associate Professor, School of Informatics, Computing and Cyber Systems, Northern Arizona University Mutation Testing Introducing one bug by hand (as we did in Part 1) is fine, and we could try it again, but “the plural of anecdote is not data.” However, this is not strictly true. If we...
UK's Metro Bank falls victim to SS7 attack.
New malware injects backdoor Trojan by exploiting known vulnerabilities.
Alex Groce, Associate Professor, School of Informatics, Computing and Cyber Systems, Northern Arizona University Using DeepState, we took a handwritten red-black tree fuzzer and, with minimal effort, turned it into a much more fully featured test generator. The DeepState fuzzer, despite requiring no...
Hackers attempt to hit major retailers in a malvertising campaign.
Government body repelled all but one in 2017/18
C++ programs using exceptions are problematic for binary lifters. The non-local control-flow “throw” and “catch” operations that appear in C++ source code do not map neatly to straightforward binary representations. One could allege that the compiler, runtime, and stack unwinding library collude to...
Customers urged to reset passwords
Leave.EU and Eldon Insurance broke data protection laws
On December 12, over 150 attendees joined a special, half-day Empire Hacking to learn about pitfalls in smart contract security and how to avoid them. Thank you to everyone who came, to our superb speakers, and to BuzzFeed for hosting this meetup at their office. Watch the presentations again It’s h...
Top executives believe security policies and cyber-threats don't apply to them.
A midterm assessment of Trump's cyber policies finds administration is making effective changes.
We open-sourced a fault injection tool, KRF, that uses kernel-space syscall interception. You can use it today to find faulty assumptions (and resultant bugs) in your programs. Check it out! This post covers intercepting system calls from within the Linux kernel, via a plain old kernel module. We’ll...
Change Your Password Day is a good time to switch to a password manager.
Kaspersky Lab claims group looks more like sysadmins than expert hackers