> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
In a landscape of unpredictable cyber-risk, organizations must prepare for the worst-case cyber-scenario
New advisory lists multiple bugs in remote access tools
For GrayHat 2020 I was asked to create a short intro video for my Red Team Village talk “Learning by doing: Building and breaking a machine learning system”.
So I put my green screen to good use and recorded this short clip for Red Team Village.
Here is the link to the clip on Twitter:
Hope you like...
How attackers are still utilizing URLs and what the victims can do
Pharma giant misconfigured cloud storage bucket
There is a lot of discussion around terms such as red team, attack team, pentest, adversarial engineering or offensive security team and similar ones.
I typically stay away from the (sometimes passionate) discussions that ensue whenever this topic comes up.
Personally, I think a good strategy is to...
Personal data of faculty, staff, and students exposed in data breach at Toledo Public Schools
Tackling insider threats is now more important than ever
While building “Husky AI” I started working a lot with Microsoft’s VS Code Python extension. It is a super convinient way to edit Jupyter Notebooks. I just use VS Code’s Remote SSH feature to get to my Linux host and work on modeling and testing there.
When threat modeling “Husky AI” I identified ba...
US imprisons CEO of payment platform that facilitated prohibited transactions for Iranian nationals
Failure to properly oversee decommissioning of data centers lands Morgan Stanley a hefty fine
During my summer internship at Trail of Bits I worked on osquery, the massively popular open-source endpoint monitoring agent used for intrusion detection, threat hunting, operational monitoring, and many other functions. Available for Windows, macOS, Linux, and FreeBSD, osquery exposes an operating...
What best practices have emerged to secure the cloud environment?
IoT vulnerabilty disclosure platform will enable vendors and researchers to resolve flaws
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts.
Overview: How Husky AI was built, threat modeled and operationalized Attacks: The attacks I want to investigate, learn about, and try out We talked about creating a...
Two-thirds of IT pros have less time to secure SaaS applications
Modern attacks use supply chain island hopping and target digitally transformed businesses
Excited to announce that I will be presenting at Grayhat - Red Team Village on October 31st 2020. The presentation is about my machine learning journey and how to build and break a machine learning system.
If you follow my blog, you can guess that there will be lots of discussion around “Husky AI”....
Admins says hacker got hold of emails and hashed passwords
How far can data go in identifying, understanding and predicting human behaviors?