> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Aussies may have to prove who they are to use online dating and social media accounts
Report assesses how cyber-criminals have exploited the COVID-19 crisis
Knowing only the name of a public S3 bucket, you can ascertain the account ID it resides in.
The deal will act as a platform for AddSecure to grow its business
Experts suspect branding move to kick-start affiliate program
We’re hiring for our Research + Engineering team! By Aaron Yoo, University of California, Los Angeles As an intern at Trail of Bits, I worked on Solar, a proof-of-concept static analysis framework. Solar is unique because it enables context-free interactive analysis of Solidity smart contracts. A u...
Attackers targeting government, commercial and tech firms
Golden Chickens group goes gunning for job-seekers
In the summer of 2020, we described our work fuzzing the Solidity compiler, solc. So now we’d like to revisit this project, since fuzzing campaigns tend to “saturate,” finding fewer new results over time. Did Solidity fuzzing run out of gas? Is fuzzing a high-stakes project worthwhile, especially if...
Daytona Beach pastor allegedly shared child sexual abuse material in online chat rooms
Exploitation by hackers of 183 ETH from newly launched DeFi aggregator was preventable
You probably heard of NFTs (non-fungible tokens). They are receiving a lot of interest over the last several months. I did some digging and realized that there are some bigger issues with the standards and various interpretations and implementations of it, and how centralized many offerings are.
Wha...
Cyber-intelligence firm finds personal data of 533 million Facebook users posted online
Former intelligence analyst pleads guilty to disclosing classified information to journalist
Today, we are releasing an experimental coverage-guided fuzzer called Honeybee that records program control flow using Intel Processor Trace (IPT) technology. Previously, IPT has been scrutinized for severe underperformance due to issues with capture systems and inefficient trace analyses. My winter...
Cyber-bully who asked wrestler “when will you die?” fined after victim takes her own life
April Fool’s Day cloud outage impacts Azure, Office 365, and Teams
Privilege escalation issue found on website CMS Umbraco
Kara Wilson and Alex Bender both join the company
American Civil Liberties Union requests artificial intelligence documents from national security agencies