> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
DHS is to propose a standard definition of biometrics for authorized collection
UK regulator could levy GDPR-sized fines in new privacy push
This post is part of a series about machine learning and artificial intelligence.
In the previous post I talked about good resources for learning more about artificial intelligence and machine learning in general, and how I started my journey in this space.
The next few posts will be about Husky AI....
University suffers “significant operational disruption”
Radware urges recipients not to pay
This year I have spent a lot of time studying machine learning and artificial intelligence.
To come up with good and useful attacks during operations, I figured it is time to learn the fundamentals and start using software, tools and algorithms. My goal was to build a couple of end to end machine le...
Colorado man who moderated disputes on illegal site AlphaBay has been incarcerated
CISA, Akamai, and CIS team up to improve SLTT cyber-defenses
Graphtage is a command line utility and underlying library for semantically comparing and merging tree-like structures such as JSON, JSON5, XML, HTML, YAML, and TOML files. Its name is a portmanteau of “graph” and “graftage” (i.e., the horticultural practice of joining two trees together so they gro...
UK joins international allies to issue cyber-defense advice
Data storage, remote access and network administration are the most common network services exposed to the internet
Excited to announce that I will be presenting at BSides Singapore this year.
The topic is adversarial usage of virtual machines during lateral movement. And we will also cover threat hunting and detection ideas.
I have been referring to this technique as the Shadowbunny over the years. :)
The confer...
Hao Zhang grabbed IP to start a new career in China
As of 1st September, publicly trusted TLS certificates must have a lifespan of 398 days or fewer.
Today I’m gonna talk about a class of application security issues I ran across a few times over the years. In particular, let’s discuss race conditions when it comes to files with sensitive content and permissions.
Race conditions can allow an adversary to gain access to sensitive information on mac...
Agency responds to fake news story in Russian media
Gartner warns of personal liability for cyber-physical systems
During an assessment you may find AWS IAM credentials. Use these tactics to identify the principal of the keys.
Floridian imprisoned for cyber-stalking and racially motivated election interference
Email accounts hacked in “significant” cyber-attack on Norwegian parliament