> TODAY'S SUMMARY (14 articles)
Today's cyber news highlights several significant threats and trends. A coordinated operation has targeted phishing kits, leading to domain seizures and legal action. Cybercriminals are increasingly attacking physical systems, emphasizing the need for enhanced security in building management. The MALFEX campaign has introduced a malicious npm package, "imgdecode," that contains a shellcode loader, further demonstrating the risks in software supply chains. Additionally, suspicious notifications have been reported on platforms like Leboncoin and Vinted, with links to malicious casinos. The U.S. CISA has added multiple vulnerabilities, including those related to Fortinet and BeyondTrust, to its known exploited catalog. Finally, AI agents are reportedly accessing sensitive data in Indian organizations, raising concerns about the use of offensive AI in cyberattacks.
|
// AI-powered summary generated at 12:00
Advanced persistent threat trends in Q2 2018
Eset reveals latest use of popular black hat tactic
Tim Alberdingk Thijm As part of my Springternship at Trail of Bits, I created a series of data-flow-based optimizations that eliminate most “dead” stores that emulate writes to machine code registers in McSema-lifted programs. For example, applying my dead-store-elimination (DSE) passes to Apache ht...
Reporters unmask military and intelligence personnel
They claim vendor failed in its PCI DSS compliance reporting
We have a soft spot in our hearts for SummerCon. This event, the longest-running hacker conference in the US, is a great chance to host hacker friends from around the world in NYC, catch up in person, and learn about delightfully weird security topics. It draws a great crowd, ranging from “hackers t...
Washington DC's Metro opts not to post results of recent internal cybersecurity audit
Increased Breaches, Growing Loss Prompt Changes to NZ Privacy Bill
As great as it is, osquery could be a whole lot better. (Think write access for extensions, triggered responses upon detection, and even better performance, reliability and ease of use.) Facebook’s small osquery team can’t respond to every request for enhancement. That’s understandable. They have th...
DomainFactory confirmed breach after forum user claimed access to customer data
Compromised admin credential to blame again
Reprise d’activité de ce blog ! Et comme premier billet, un retour sur Wannacry et surtout notPetya, attaques ayant réussi l’exploit de causer des centaines de millions d’euros de perte suite à l’interruption de lignes de productions dans des usines [...] Lire la suite
Programmer’s $50m dark web gamble fails to pay off
New complex will cement capital’s position as global legal hub, says government
Will India's ban on cryptocurrencies drive traders to black markets?
London Office for Rapid Cybersecurity Advancement welcomes first cohort of businesses
Sample of Rakhni Trojan chooses the payload to launch once the malicious file is opened
Rebrand includes new and improved features for registered viewers
New report finds distinction in perceived state of SOC among front line and executives
Grand jury indicts former fire chief in an 11-count case of computer security breach charges