> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
US convicts RG Coins owner for role in international multi-million-dollar cyber-fraud scheme
Major French shipping firm’s servers sunk by ransomware attack
Techniques to enumerate the account ID associated with an AWS access key.
Political candidates send unwanted direct messages to more than half of Americans
84% of IT and security decision makers report seeing an increase in threats this year
P1: Critical - Discovering and Foiling a Threat Actor Disclaimers, Credits: Thank you to everyone who helped validate any part of the project. It took a lot of work to figure out the extent of who was/is affected. I appreciate all of the help that we have received, with a special thank you to those...
Synopsys publishes advisory detailing vulnerabilities in a number of router chipsets
CYBERSEC awards UK and NCSC for cybersecurity posture
This was also presented at BSides Singapore 2020. The slides are here and YouTube link is here.
The origins of the Shadowbunny A few years ago, around 2016, I went on a relaxing two weeklong vacation. It was great to disconnect from work. I traveled to Austria, enjoying hiking in the mountains, and...
Businesses forced to rely on different teams with distinct skill sets to manage public and private cloud infrastructure
Tessian study finds IT leaders worried about stretched security teams
This year one of my goals was to learn about machine learning and artificial intelligence.
I wrote about my journey before - including what classes I took and books I read, the models and systems I built and operationalized, threat modeling it to learn about practical attacks and defenses. My goal i...
Just 0.33% of hacking offences reported in the UK were prosecuted last year
COVID-19 surge in online activity is putting pressure on organizations
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts.
Overview: How Husky AI was built, threat modeled and operationalized Attacks: The attacks I want to investigate, learn about, and try out Mitigations: Ways to preve...
Hundreds of hospitals across the country and beyond affected
Close to half do not trust the integrity of information they find online
This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts.
Overview: How Husky AI was built, threat modeled and operationalized Attacks: The attacks I want to investigate, learn about, and try out The previous post covered...
Second-largest ever HIPAA penalty imposed on Premera Blue Cross after 2014 data breach
House unanimously approves legislation to make hacking voting systems a federal crime