> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Double extortion attempt likely, according to Kela
If you’re thinking of writing a paper describing an exciting novel approach to smart contract analysis and want to know what reviewers will be looking for, you’ve come to the right place. Deadlines for many big conferences (ISSTA tool papers, ASE, FSE, etc.) are approaching, as is our own Workshop o...
Developing datasets is vital in enabling the effective use of AI
Financial Conduct Authority swats away spam and malware
The Kindle (ebook) edition of “Cybersecurity Attacks - Red Team Strategies” is currently free on Amazon.
Grab your copy while it lasts and spread the word!
French security company warns of customer data and source code theft
America’s National Cyber Investigative Joint Task Force seeks to educate public on ransomware threat
Keep your access by chaining assume-role calls.
Tardy access revocation when workers depart exposes US organizations to security risk
Over half of attacks detected by Barracuda involve the use of automation
Maintain access to an EC2 instance and it's IAM role via user data scripts.
Public schools in US to receive $3m in cybersecurity grants from IBM to protect against threats
ICS vulnerabilities were up 25% year-on-year
The other day Microsoft published a great deep dive around the second stage payloads and hands-on hacking activities of the Solarwinds/Sunburst incidents that where uncovered late 2020.
One thing that is so interesting is the use of off the shelve Cobalt Strike tooling and templates for command &...
Study uncovers what’s at stake for UK capital as it continues to adapt to health crisis
Customers urged to patch Orion and Serv-U FTP promptly
Trail of Bits sponsored the recent justCTF competition, and our engineers helped craft several of the challenges, including D0cker, Go-fs, Pinata, Oracles, and 25519. In this post we’re going to cover another of our challenges, titled PDF is broken, and so is this file. It demonstrates some of the P...
Forward Air couldn’t reach customers after December incident
Attackers are capitalizing on lack of vendor thoroughness
Survivorship bias is an interesting thing that we can observe nearly daily. It is the success stories of exponentially growing startups, the motivational speaker who shares their insights on how to be successful and so forth.
What is it exactly?
What is survivorship bias? Wikipedia defines it as “…t...