> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
Around a third of UK workers have observed a rise in speculative cyber-criminal activity
Research by Thycotic found cybersecurity budgets are increasing
If you work on deep learning systems, check out our new tool, PrivacyRaven—it’s a Python library that equips engineers and researchers with a comprehensive testing suite for simulating privacy attacks on deep learning systems. Because deep learning enables software to perform tasks without explicit...
Prosecution service suffers scores of “severe” incidents
ICO makes 139 recommendations after audit reveals massive failings
La méthode n’est pas nouvelle, mais nous observons une recrudescence de TPE et PME victimes de cette arnaque, qui peut leur faire perdre plusieurs dizaines de milliers d’euros !
L’objet de cet article n’est pas de stigmatiser les victimes, mais d’illustrer [...] Lire la suite
COVID19 dominates business thinking globally but cyber not far behind
Sheer quantity of online child sexual abuse material is overwhelming European law enforcement authorities
Techniques to enumerate the account ID associated with an AWS access key.
A quarter of remote workers would rather suffer in silence than engage with tech support
Vulnerability makes Comcast XR11 voice remote a listening device for bad actors
P1: Critical - Discovering and Foiling a Threat Actor Disclaimers, Credits: Thank you to everyone who helped validate any part of the project. It took a lot of work to figure out the extent of who was/is affected. I appreciate all of the help that we have received, with a special thank you to those...
BAHAMUT is responsible for a high number of sophisticated and politically motivated attacks
Asian food delivery service suffers major data breach of customer and partner records
This was also presented at BSides Singapore 2020. The slides are here and YouTube link is here.
The origins of the Shadowbunny A few years ago, around 2016, I went on a relaxing two weeklong vacation. It was great to disconnect from work. I traveled to Austria, enjoying hiking in the mountains, and...
Cyber-threats continue to hit distributed workforces
Opacity of financial products and widespread cybercrime force FCA’s hand
Mass surveillance must respect privacy rights, says CJEU
How security is slowly catching up with the impact of remote working
American mobile network operator’s website injected with malware that steals credit card details