> TODAY'S SUMMARY (317 articles)
Today's cybersecurity landscape features several critical updates and ongoing threats. Notably, a zero-day vulnerability in BeyondTrust's software has been exploited by a suspected Chinese espionage group, raising alarm for organizations utilizing remote support tools. In addition, Burger King Japan reported a significant data breach affecting over 11 million customers, highlighting the growing risk of cyberattacks on large corporations. The rise of ransomware gangs employing threats of physical violence for extortion is increasingly concerning, as reported in a new study. Furthermore, multiple vulnerabilities have been discovered across various systems, including critical RCE flaws in Microsoft Office and Google Chrome, necessitating immediate patching. Lastly, AI models continue to pose risks, with researchers warning about the potential misuse of data during their training processes.
|
// AI-powered summary generated at 20:01
Press release site under sustained pressure
Priority 1 bulletin fixes zero-day flaw
In the past few weeks the details of two critical design flaws in modern processors were finally revealed to the public. Much has been written about the impact of Meltdown and Spectre, but there is scant detail about what these attacks are and how they work. We are going to try our best to fix […]
The number of records compromised also surpassed all other years, with over 7.8 billion records exposed, a 24.2% increase over 2016’s previous high of 6.3 billion.
Upfront costs are dwarfed by the human costs of managing and assessing the millions of alerts and false-positives these tools generate.
Summary This is the third part of a blog series covering my security research into Samsung’s TrustZone.
This post covers the following vulnerabilities that I have found:
SVE-2017–8888: Authentication Bypass + Buffer overflow in tlc_server SVE-2017–8889: Stack buffer overflow in ESECOMM Trustlet SVE-...
A proof of concept simulates a threat actor transferring the Mimikatz malware over TLS negotiation traffic.
Best practice security still eluding UK healthcare
Summary This is the second part of a blog series covering my security research into Samsung’s TrustZone.
This post is a companion to my talk from Ekoparty 2017, namely the reverse engineering process of T-base. The slides and video of the talk are both available online.
In fact, since both of those...
High Court judges say he should face trial in the UK
Larger firms that spend more are in the lead
Summary This is the first part of a blog series about reverse engineering and exploiting Samsung’s TrustZone. Following parts in the series so far: 2, 3.
This first post covers the basics of the architecture. All of this is public info, nothing new, all of it has been covered in bits and pieces in v...
Infosecurity Magazine talks to Emily Biggs, winner of the Security Champion of the Year award
Threat actors are exploiting the vulnerability to distribute the DOGCALL/ROKRAT malware to South Korean victims.
Four years ago, we released McSema, our x86 to LLVM bitcode binary translator. Since then, it has stretched and flexed; we added x86-64 support, put it on a performance-focused diet, and improved its usability and documentation. McSema wasn’t the only thing improving these past years, though. At the...
Additional implants are being used as a second-stage payload to gain persistence for continued data exfiltration and for targeted access.
A marketing agency made public a raft of information about influential "creators" – mostly Instagram, Twitter and YouTube personalities.
More than one million security scans and seven million security tests carried out on public sector websites
More than two-thirds (69%) of organizations are exposing APIs to the public and their partners.
Incidents quadrupled in 2017, with losses ranging from a few thousand dollars up to $3 million.