> TODAY'S SUMMARY (3 articles)
Today's cybersecurity news highlights several significant threats. First, hackers have exploited a compromised ConnectWise credential to gain access to 173 Microsoft 365 tenants, raising concerns about the security of cloud services. Additionally, Rank Math has reported that certain downloads of their SEO PRO version 3.0.123 contained malware, indicating risks associated with third-party software updates. Furthermore, federal agencies have released new cybersecurity guidance for securing frontier AI systems, emphasizing the need for robust controls and independent testing during AI model evaluations. These developments underscore ongoing vulnerabilities in cloud security, software integrity, and the importance of proactive measures in emerging technologies.
|
// AI-powered summary generated at 08:00
Ministry of State Security blamed for latest cyber-theft
South Korean exchange is latest to be hit
Sometimes a conference just gets it right. Good talks, single track, select engaged attendees, and no sales talks. It’s a recipe for success that Kolide got right on its very first try with QueryCon, the first-ever osquery conference. It’s no secret that we are huge fans of osquery, Facebook’s award...
Hutchins accused of developing second piece of malware
New data from CyberSeek shows expansion in the cyber-worker shortage.
We’re releasing an extension for osquery that lets you manage the local firewalls of your fleet. Each of the three major operating systems provides a native firewall, capable of blocking incoming and outgoing access when configured. However, the interface for each of these three firewall systems are...
Updates address critical vulnerabilities in Adobe Flash Player.
Cyber-criminals in in the deep and dark webs target job seekers and recruiters.
We’re releasing an extension for osquery that lets you manage Google Santa without the need for a separate sync server. Google Santa is an application whitelist and blacklist system for macOS ideal for deployment across managed fleets. It uses a sync server from which daemons pull rules onto managed...
Changing the culture of companies to focus on cyber security as well as safety must be a priority to secure systems powering the UK’s physical infrastructure.
EfficientIP stats shows average cost per attack has risen sharply
We’re releasing an extension for osquery that will let you dig deeper into the NTFS filesystem. It’s one more tool for incident response and data collection. But it’s also an opportunity to dispense with forensics toolkits and commercial services that offer similar capabilities. Until now, osquery h...
Privacy International sends Gareth Southgate a Faraday cage to protect device
Palo Alto Networks explains the cyberattack tools used by the threat group OilRig.
Russian threat worse than first thought
Impact grows every day, months after the largest cyber-attack on an American city.
Experts claim organizations must be more agile
Rapid7 releases its third annual National Exposure Index, with the US at the top of the index.
A major breach at a job recruitment firm puts enterprises and job seekers at risk.
New Hall of Fame inductee James Lyne says new approaches are needed