> TODAY'S SUMMARY (3 articles)
Cybercriminal activities are intensifying, particularly with the financially motivated group Storm-3358 exploiting the ARTEX framework to target the financial sector. In addition, SonicWall has issued alerts regarding a serious SSL-VPN multi-factor authentication bypass vulnerability, which has been actively exploited in attacks, emphasizing the need for immediate security updates. Meanwhile, Slackware has released new httpd packages to address security issues in its 15.0 and current versions. Organizations are urged to prioritize patching vulnerabilities to mitigate potential threats. Overall, the landscape is marked by increasing sophistication in cyberattacks and a need for robust defense measures.
|
// AI-powered summary generated at 04:00
Credential leak earlier this week was just tip of the iceberg
Kaspersky chief strongly condemns attacks on hospitals during the pandemic
At Trail of Bits we do more than just security audits: We also push the boundaries of research in vulnerability detection tools, regularly present our work in academic conferences, and review interesting papers from other researchers (see our recent Real World Crypto and Financial Crypto recaps). In...
Hackers at first ever virtual HackerOne live hacking event give generously to the World Health Organization
1 in 5 small businesses say customer data could be stored more securely
It’s been four years since my blog post “2000 cuts with Binary Ninja.” Back then, Binary Ninja was in a private beta and the blog post response surprised its developers at Vector35. Over the past few years I’ve largely preferred to use IDA and HexRays for reversing, and then use Binary Ninja for any...
Funds advised by Apax Partners have acquired cybersecurity firm Coalfire
A Specops Software survey reveals concerning trends regarding password security
Written in Go, Hugo is an open source static site generator available under the Apache Licence 2.0. Hugo supports TOML, YAML and JSON data file types, Markdown and HTML content files and uses shortcodes to add rich content. Other notable features are taxonomies, multilingual mode, image processing,...
More #COVID19 risks emerge as 77% of remote workers say they’re not worried about threats
Campaign of harassment linked to #COVID19 fake news peddlers
At Trail of Bits, we’ve all been working remotely due to COVID-19. But the next Empire Hacking event will go on, via video conference! When: April 14th @ 6PM How: RSVP via this Google Form or on Meetup. We’ll email you an invitation early next week. Come talk shop with us! Every two months, Empire [...
SMS SenderID Protection Registry helps organizations protect their texts
US Army awards lucrative cyber-defense contract to Perspecta Labs
Conceptual Attack Graphs One question that I have gotten a few times about “Cybersecurity Attacks - Red Team Strategies” is around the conceptual attack graphs in “Chapter 3, Measuring an Offensive Security Program”. Specifically, how I create them.
In this post I will briefly go over some of the re...
Cyber-criminals are advertising a database of UniCredit employees’ data for sale
New Jersey IT services provider hit with Maze ransomware
Trustwave reveals how the tactics of cyber-criminals evolved in 2019
Academics praise efforts to keep contact tracing apps secure and user data private
Cyber-criminals register hundreds of domains to part users with their PII