> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
Cybersecurity consultancies are one of the fastest growing types of startups in the UK
Peer-to-peer botnet FritzFrog has been breaching servers since January
In this post, we’ll show you how to test your smart contracts with the Echidna fuzzer. In particular, you’ll see how to: Find a bug we discovered during the Set Protocol audit using a variation of differential fuzzing, and Specify and check useful properties for your own smart contract libraries. An...
Olympia Valance suffers “traumatizing” phone hack that exposed her private images
Operational cyber tools now in use on US Cyber Command’s training platform
The Ultimate OSCP Preparation Guide [DEPRECATED] Update Notes This guide is now deprecated due to exam revisions made by Offensive Security on January 11, 2022.
I published this guide on August 17th, of 2020. Offensive Security no longer requires the buffer overflow, and to pass this exam, you’ll ha...
23% of office workers rely on unauthorized devices to work from home
Malware was used to target defense contractors, says CISA
Leverage file read and SSRF vulnerabilities to steam IAM credentials and event data from Lambda.
Social network cracks down on those promoting violence
UK businesses opt for outsourced partners for cybersecurity services
These days business decisions and feature development often is influenced heavily by telemetry information. Telemetry is baked into the programs, services and applications we use.
Companies are hungry for telemetry because with machine learning and Deep Neural Networks “data is the new oil”.
Telemet...
South African businesses also affected as fraudster tricks firm
Chrome users to receive warning when they start filling in a form that isn’t secure
TL;DR: Sinter is the first available open-source endpoint protection agent written entirely in Swift, with support for Apple’s new EndpointSecurity API from first principles. Sinter demonstrates how to build a successful event-authorization security agent, and incorporates solutions to many of the c...
Over 70% of industrial control system flaws disclosed in 2020 can be exploited remotely
Vulnerability in Thales component could endanger millions of IoT devices
Certified Ethical Hacker | Master The CEH Master offered by EC-Council, claims to be a real-world, hands-on approach to everyday life as an ethical hacker:
In the above photo, what stood out the most to me was, “We test your abilities with real-world challenges in a real-world environment, and a tim...
SpyCloud will use the investment to grow its anti-fraud capabilities
Comparitech finds another misconfigured online database