> TODAY'S SUMMARY (317 articles)
Today's cybersecurity landscape features several critical updates and ongoing threats. Notably, a zero-day vulnerability in BeyondTrust's software has been exploited by a suspected Chinese espionage group, raising alarm for organizations utilizing remote support tools. In addition, Burger King Japan reported a significant data breach affecting over 11 million customers, highlighting the growing risk of cyberattacks on large corporations. The rise of ransomware gangs employing threats of physical violence for extortion is increasingly concerning, as reported in a new study. Furthermore, multiple vulnerabilities have been discovered across various systems, including critical RCE flaws in Microsoft Office and Google Chrome, necessitating immediate patching. Lastly, AI models continue to pose risks, with researchers warning about the potential misuse of data during their training processes.
|
// AI-powered summary generated at 20:01
Big Blue also warns of new Notes vulnerability
ICO, NHS, US Courts and many other government sites hit
We’re helping Parity Technologies secure their Ethereum client. We’ll begin by auditing their codebase, and look forward to publishing results and the knowledge we gained in the future. Parity Technologies combines cryptography, cellular systems, peer-to-peer technology and decentralized consensus t...
Russia suspected of pre-ceremony cyber-attack
At the same time, the number of known vulnerabilities doubled in 2017.
In the past few weeks the details of two critical design flaws in modern processors were finally revealed to the public. Much has been written about the impact of Meltdown and Spectre, but there is scant detail about what these attacks are and how they work. We are going to try our best to fix […]
Dentacoin is coming to North America for the first time.
Hackers can pump the volume to blaring levels, cycle through channels, open disturbing YouTube content or kick the TV off Wi-Fi.
Summary This is the third part of a blog series covering my security research into Samsung’s TrustZone.
This post covers the following vulnerabilities that I have found:
SVE-2017–8888: Authentication Bypass + Buffer overflow in tlc_server SVE-2017–8889: Stack buffer overflow in ESECOMM Trustlet SVE-...
Majority would also boycott firms with poor track record on data security
Smartphone giant says there’s nothing to worry about from iBoot leak
Summary This is the second part of a blog series covering my security research into Samsung’s TrustZone.
This post is a companion to my talk from Ekoparty 2017, namely the reverse engineering process of T-base. The slides and video of the talk are both available online.
In fact, since both of those...
Newspaper’s error means firewall was down for two weeks
One method exploits the magnetic field generated by a computer's CPU.
Summary This is the first part of a blog series about reverse engineering and exploiting Samsung’s TrustZone. Following parts in the series so far: 2, 3.
This first post covers the basics of the architecture. All of this is public info, nothing new, all of it has been covered in bits and pieces in v...
Surprisingly, it's not Dash.
68% of organizations are currently creating or consuming threat data.
Four years ago, we released McSema, our x86 to LLVM bitcode binary translator. Since then, it has stretched and flexed; we added x86-64 support, put it on a performance-focused diet, and improved its usability and documentation. McSema wasn’t the only thing improving these past years, though. At the...
Bots and breached credentials continue to fuel insatiable rise
Infraud Organization inflicted $2.2bn in intended losses