> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
Virtual currency scam is said to have cost Brazilians $200m
Coveware warns organizations to think carefully about post-breach strategy
My GrayHat Red Team Village talk “Learning by doing: Building and breaking a machine learning system” is now live on YouTube.
Check it out: https://www.youtube.com/watch?v=-SV80sIBhqY and smash the Like button! :D
Question? I thought of turning the content into a hands-on workshop. Let me know if th...
Creators of GAIA-X must act quickly to ensure it is relevant to European CIOs
A further 27 domain names used by Iran’s Islamic Revolutionary Guard have been seized by the US
TL;DR: We audited an implementation of the Diamond standard proposal for contract upgradeability and can’t recommend it in its current form—but see our recommendations and upgrade strategy guidance. We recently audited an implementation of the Diamond standard code, a new upgradeability pattern. It’...
US cybersecurity company debuts no-cost Compliance Audit Readiness Assessment tool
Vermont governor calls in National Guard to help UVM Health Network recover from cyber-attack
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts.
Overview: How Husky AI was built, threat modeled and operationalized Attacks: Some of the attacks I want to investigate, learn about, and try out A few weeks ago wh...
NCSC and Microsoft partner to support Cyber Accelerator Program
The campaign plays on claims about the integrity of the ongoing Presidential election
A few years back the Blue Team of a company asked to be targeted in a Red Team Operation.
That was a really fun, because Rules of Engagement commonly prevent targeting Blue Teams. Blue’s infrastructure, systems and team members are often out of scope, unfortunately.
Blue team infrastructure is a gol...
There remains a lack of urgency to adapt security in light of COVID-19
ACLU disagrees, but Prop 24 aimed at enhancing data protection
Summary Many people do not know about the Jack Daniel’s Tennessee Squires. The Squire Association is an Elite Club for “friends of Jack Daniel’s”. Anyone that has ever dreamed of being a Tennessee Squire knows how difficult - if not impossible it is to obtain membership without paying thousands of d...
Bank statements and passwords among the eBay haul
Network operations halted after unidentified attack
Potential Abuse on a hooked Function There is a potential for abuse with any plugins that implement the hook function ‘shunt_is_valid_user’. In the code below we simply demonstrate that authentication can be completely bypassed by returning TRUE in the hooked function. This would be an ideal place f...
There has been a huge rise in cyber-attacks targeting financial services companies since COVID-19
Anonymous user carries out first Silk Road wallet cryptocurrency transaction in five years