Covid-19 has forced many businesses to adapt at speed
Fortune 1000 businesses face increasing cyber-incident costs
A few weeks ago, we went to the 24th Financial Cryptography (FC) conference and the Workshop on Trusted Smart Contracts (WTSC), where we presented our work on smart contract bug categorization (see our executive summary) and a poster on Echidna. Although FC is not a blockchain conference, it feature...
Advanced Protection Program available to all users
Crypsis Group’s new threat research team will share threat data with the public
TL;DR: Trail of Bits has developed ntfs_journal_events, a new event-based osquery table for Windows that enables real-time file change monitoring. You can use this table today to performantly monitor changes to specific files, directories, and entire patterns on your Windows endpoints. Read the sche...
Philips becomes first medical device manufacturer to receive new product cybersecurity testing certification
Surge in coronavirus scams prompts firms to offer businesses free cybersecurity assistance
Malgré les efforts des constructeurs, les automates industriels sont loin d’avoir un niveau de sécurité satisfaisant. Trop peu d’entre eux font d’ailleurs l’effort de se lancer dans ce challenge. Si l’on ne peut pas avoir de composants sécurisés, que faire [...] Lire la suite
Magecart hits manufacturer NutriBullet with skimming attack
Security vendor urges customers to upgrade as soon as possible
Voatz allows voters to cast their ballots from any geographic location on supported mobile devices. Its mobile voting platform is under increasing public scrutiny for security vulnerabilities that could potentially invalidate an election. The issues are serious enough to attract inquiries from the D...
Which? claims simple checks could have saved hundreds of millions in losses
Loans companies misconfigure S3 bucket containing sensitive customer info
The Ethereum Name Service (ENS) contract recently suffered from a critical bug that prompted a security advisory and a migration to a new contract (CVE-2020-5232). ENS allows users to associate online resources with human-readable names. As you might expect, it allows you to transfer and sell domain...
US bill to tackle child sexual abuse material online has been left in limbo over privacy concerns
Users’ payment card information exposed in six-month data breach of guitar tuition website TrueFire
FBI warns users of social media and dating apps to be wary of human traffickers
Attackers target government body for students’ financial info
Coronavirus drives home working surge and school closures across globe