> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
Endpoint security leads vulnerability management and remote access a main issue for security
Virginian firm Centripetal in legal triumph
La méthode n’est pas nouvelle, mais nous observons une recrudescence de TPE et PME victimes de cette arnaque, qui peut leur faire perdre plusieurs dizaines de milliers d’euros !
L’objet de cet article n’est pas de stigmatiser les victimes, mais d’illustrer [...] Lire la suite
Ransomware still the most dominant threat facing firms
Verizon Business points to decline for third year in a row
Techniques to enumerate the account ID associated with an AWS access key.
The new variant gives TeamTNT enhanced cryptojacking capabilities
Custom version of leaked 2015 bootkit is being used to attack diplomats and NGOs
P1: Critical - Discovering and Foiling a Threat Actor Disclaimers, Credits: Thank you to everyone who helped validate any part of the project. It took a lot of work to figure out the extent of who was/is affected. I appreciate all of the help that we have received, with a special thank you to those...
Medical trials slowed down after ransomware attack on American company holds data hostage
US arrests two leaders of notorious video game piracy group, Team Xecuter
This was also presented at BSides Singapore 2020. The slides are here and YouTube link is here.
The origins of the Shadowbunny A few years ago, around 2016, I went on a relaxing two weeklong vacation. It was great to disconnect from work. I traveled to Austria, enjoying hiking in the mountains, and...
Resources in the center include a training plan and awareness posters
More than 15,000 emails with malware were sent to HMRC this year
This year one of my goals was to learn about machine learning and artificial intelligence.
I wrote about my journey before - including what classes I took and books I read, the models and systems I built and operationalized, threat modeling it to learn about practical attacks and defenses. My goal i...
Intertrust warns patient data and sensitive IP are at risk
Flaw could have enabled attackers to reset user passwords
International Maritime Organization appears to have recovered swiftly
Novel attacker uses Demonbot variant of Mirai malware to attack port 60001
Charges brought after illegal takeover of NFL and NBA players’ social media accounts