> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Trump administration’s security boss and staff compromised
Texas resident scammed schools, senior citizens, and charity supporting families of the terminally ill
In the summer of 2020, we described our work fuzzing the Solidity compiler, solc. So now we’d like to revisit this project, since fuzzing campaigns tend to “saturate,” finding fewer new results over time. Did Solidity fuzzing run out of gas? Is fuzzing a high-stakes project worthwhile, especially if...
Data loss struck over 50% of organizations last year despite most running up to 10 cybersecurity solutions
Dating app starts Stand for Safety initiative to protect women from online abuse
You probably heard of NFTs (non-fungible tokens). They are receiving a lot of interest over the last several months. I did some digging and realized that there are some bigger issues with the standards and various interpretations and implementations of it, and how centralized many offerings are.
Wha...
What are the main concerns regarding the use of AI in cybersecurity?
Khan replaces Dr Jessica Barker in the role
Today, we are releasing an experimental coverage-guided fuzzer called Honeybee that records program control flow using Intel Processor Trace (IPT) technology. Previously, IPT has been scrutinized for severe underperformance due to issues with capture systems and inefficient trace analyses. My winter...
Awake Security report claims ransom may not be group’s primary goal
Full event now available to watch anytime, anywhere!
Many machine learning (ML) models are Python pickle files under the hood, and it makes sense. The use of pickling conserves memory, enables start-and-stop model training, and makes trained models portable (and, thereby, shareable). Pickling is easy to implement, is built into Python without requirin...
IT skills shortage could also weaken Britain’s defense against attacks on critical national infrastructures
GRU-linked Ghostwriter group pegged for involvement
Le CLUSIF (CLUb de la Sécurité de l’Information Français) publie un document qui s’adresse à l’ensemble des acteurs ayant à sécuriser un système industriel existant ou à venir.
(mise à jour Septembre 2021 : le guide est à présent [...] Lire la suite
No ransom demand could indicate state involvement
SalusCare turns to the law after Amazon denies request to view storage buckets allegedly housing healthcare provider’s stolen data
Kansas, Missouri, Montana, and Washington to work with National Governors Association
Feds flag danger of ransomware that weaponizes DiskCryptor
Lindy Cameron to make first speech as NCSC boss today