> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
Regular conversations are needed for a company-wide approach to security
German arm of Swedish fashion giant given massive fine as company announces closure of 250 stores
La méthode n’est pas nouvelle, mais nous observons une recrudescence de TPE et PME victimes de cette arnaque, qui peut leur faire perdre plusieurs dizaines de milliers d’euros !
L’objet de cet article n’est pas de stigmatiser les victimes, mais d’illustrer [...] Lire la suite
FBI warns online journals may be used to spread disinformation about the US election
US imprisons cyber-thief who stole millions of user records from Dropbox and LinkedIn
Techniques to enumerate the account ID associated with an AWS access key.
Cost, storage, user behavior and migration time cited as reasons to not do passwordless authentication
The ISF details six characteristics CISOs must exhibit in today's world
P1: Critical - Discovering and Foiling a Threat Actor Disclaimers, Credits: Thank you to everyone who helped validate any part of the project. It took a lot of work to figure out the extent of who was/is affected. I appreciate all of the help that we have received, with a special thank you to those...
Why the CISO needs to get out from IT's shadow, and on to the board
Security teams should learn to operate in an environment of uncertainty
This was also presented at BSides Singapore 2020. The slides are here and YouTube link is here.
The origins of the Shadowbunny A few years ago, around 2016, I went on a relaxing two weeklong vacation. It was great to disconnect from work. I traveled to Austria, enjoying hiking in the mountains, and...
Mitiga says attackers have already targeted 150 organizations
Social network says it was tipped off by FBI
This year one of my goals was to learn about machine learning and artificial intelligence.
I wrote about my journey before - including what classes I took and books I read, the models and systems I built and operationalized, threat modeling it to learn about practical attacks and defenses. My goal i...
Watchmaker says it was forced to shut down some systems
Otorio discovers serious flaws in leading industrial remote access software solutions
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts.
Overview: How Husky AI was built, threat modeled and operationalized Attacks: The attacks I want to investigate, learn about, and try out Mitigations: Ways to preve...
Cyber Readiness Institute and CISA collaborate on new telework cybersecurity toolkit
Kylie Cosmetics warns customers their information was impacted by Shopify data theft