> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
TL;DR: We’re open-sourcing a new framework, blight, for painlessly wrapping and instrumenting C and C++ build tools. We’re already using it on our research projects, and have included a set of useful actions. You can use it today for your own measurement and instrumentation needs: Why would you ever...
Home Depot reaches $17.5m settlement over 2014 data breach
Porter will be responsible for all aspects of risk and compliance across the enterprise
There are plenty of examples of artificial intelligence and machine learning systems that made it into the news because of biased predictions and failures.
Here are a few examples on AI/ML gone wrong:
Amazon had an AI recruiting tool which favored men over women for technical jobs The Microsoft chat...
Events firm not clear how strong password encryption was
52% of respondents cite reputational damage as the biggest challenge regarding secure outbound communications
After writing Go for years, many of us have learned the error-checking pattern down to our bones: “Does this function return an error? Ope, better make sure it’s nil before moving on.” And that’s great! This should be our default behavior when writing Go. However, rote error checking can sometimes p...
Feds urge users to be aware of common attack techniques
SEC alleges firm lied about its customer base
You might have heard about “NAT Slipstreaming” by Samy Kamkar. It’s an amazing technique that allows punching a hole in your routers firewall by just visiting a website.
The attack depends on the router having the Application Layer Gateway enabled. This gateway can be used by anyone inside your netw...
CISA could get $58m to bring state and local authority cybersecurity checks up to date
New York hospital, Florida urgent care center, and Georgia dentist hit by cyber-criminals
Credits Sick.Codes
Github: (https://github.com/sickcodes)
Twitter: (https://twitter.com/sickcodes)
John
Github: (https://github.com/johnjhacking) Nick Sahler
Github: (https://github.com/nicksahler)
Twitter: (https://twitter.com/tensor_bodega)
With Collaboration from:
Harold Hunt
LinkedIn: (https://w...
UK lawmakers propose new law to block high-risk telecommunications equipment suppliers
ISF digest sets out how orgs can positively influence staff behavior
A new white paper from the NCSC explains the potential benefits of adopting a cloud-system.
Thomas Moyer is accused of offering $70,000 worth of iPads to police officers
Just a quarter of consumers are aware that scams are more common during Christmas and other sales shopping periods
Report finds serious problems in many popular devices
Researcher gets nearly $4000 for high severity discoveries