> TODAY'S SUMMARY (14 articles)
Today's cyber news highlights several significant threats and trends. A coordinated operation has targeted phishing kits, leading to domain seizures and legal action. Cybercriminals are increasingly attacking physical systems, emphasizing the need for enhanced security in building management. The MALFEX campaign has introduced a malicious npm package, "imgdecode," that contains a shellcode loader, further demonstrating the risks in software supply chains. Additionally, suspicious notifications have been reported on platforms like Leboncoin and Vinted, with links to malicious casinos. The U.S. CISA has added multiple vulnerabilities, including those related to Fortinet and BeyondTrust, to its known exploited catalog. Finally, AI agents are reportedly accessing sensitive data in Indian organizations, raising concerns about the use of offensive AI in cyberattacks.
|
// AI-powered summary generated at 12:00
Researchers are calling GandCrab v4.1 ransomware a speculative SMB exploit spreader.
Forrester claims blockchain might hold the answer
Depuis 18 mois que je me penche sur le Règlement Général de Protection des Données (RGPD, ou GDPR en anglais), j’ai relevé deux éléments qui reviennent systématiquement lors de mes interventions :
Une démarche de conformité RGPD n’est en réalité [...] Lire la suite
Hackers claim to have incriminating webcam footage
Check Point report reveals 42% of global enterprises were hit this year
Tim Alberdingk Thijm As part of my Springternship at Trail of Bits, I created a series of data-flow-based optimizations that eliminate most “dead” stores that emulate writes to machine code registers in McSema-lifted programs. For example, applying my dead-store-elimination (DSE) passes to Apache ht...
The ROI on the cost of stolen certificates makes the investment worth it for criminals, researchers find.
Despite having the same skills, female security pros are earning less than their male counterparts.
We have a soft spot in our hearts for SummerCon. This event, the longest-running hacker conference in the US, is a great chance to host hacker friends from around the world in NYC, catch up in person, and learn about delightfully weird security topics. It draws a great crowd, ranging from “hackers t...
Hacker-powered security increases vulnerability disclosure.
Unknown and unsecure domains continue to be a problem for businesses
As great as it is, osquery could be a whole lot better. (Think write access for extensions, triggered responses upon detection, and even better performance, reliability and ease of use.) Facebook’s small osquery team can’t respond to every request for enhancement. That’s understandable. They have th...
Recorded Future claims two-year-old Netgear flaw to blame
GDPR implications get more serious for firm
Reprise d’activité de ce blog ! Et comme premier billet, un retour sur Wannacry et surtout notPetya, attaques ayant réussi l’exploit de causer des centaines de millions d’euros de perte suite à l’interruption de lignes de productions dans des usines [...] Lire la suite
Cambridge Analytica fallout continues
A new report reveals how to communicate in context when presenting to boards of directors.
FBI files criminal complaint of stealing trade secrets.
Researcher cooks up bad news for Thomas Cook Airlines.
Microsoft and Adobe updates make for a busy July