> TODAY'S SUMMARY (317 articles)
Today's cybersecurity landscape features several critical updates and ongoing threats. Notably, a zero-day vulnerability in BeyondTrust's software has been exploited by a suspected Chinese espionage group, raising alarm for organizations utilizing remote support tools. In addition, Burger King Japan reported a significant data breach affecting over 11 million customers, highlighting the growing risk of cyberattacks on large corporations. The rise of ransomware gangs employing threats of physical violence for extortion is increasingly concerning, as reported in a new study. Furthermore, multiple vulnerabilities have been discovered across various systems, including critical RCE flaws in Microsoft Office and Google Chrome, necessitating immediate patching. Lastly, AI models continue to pose risks, with researchers warning about the potential misuse of data during their training processes.
|
// AI-powered summary generated at 20:01
Cybercriminals have developed several schemes to defraud those looking to profit from the growth in cryptocurrencies.
Black hats are eschewing ransomware in favor of easier ways to make cash
In the past few weeks the details of two critical design flaws in modern processors were finally revealed to the public. Much has been written about the impact of Meltdown and Spectre, but there is scant detail about what these attacks are and how they work. We are going to try our best to fix […]
NTIA wants info to remain freely accessible despite new European privacy laws
Leaked usernames and passwords for online accounts represent a growing security risk
Summary This is the third part of a blog series covering my security research into Samsung’s TrustZone.
This post covers the following vulnerabilities that I have found:
SVE-2017–8888: Authentication Bypass + Buffer overflow in tlc_server SVE-2017–8889: Stack buffer overflow in ESECOMM Trustlet SVE-...
40% of respondents in a new survey felt that their security solutions aren’t as flexible as the rest of their cloud initiatives.
67% of respondents admit that cybersecurity practices in their organizations “would shock outsiders.”
Summary This is the second part of a blog series covering my security research into Samsung’s TrustZone.
This post is a companion to my talk from Ekoparty 2017, namely the reverse engineering process of T-base. The slides and video of the talk are both available online.
In fact, since both of those...
Hacks against MRI machines and other devices can have a real-world impact on patient health.
Proofpoint discovers man-in-the-middle attacks targeting Tor proxy
Summary This is the first part of a blog series about reverse engineering and exploiting Samsung’s TrustZone. Following parts in the series so far: 2, 3.
This first post covers the basics of the architecture. All of this is public info, nothing new, all of it has been covered in bits and pieces in v...
J-CODE is latest response to country’s opioid crisis
Judges rule previous surveillance regime is unlawful
Four years ago, we released McSema, our x86 to LLVM bitcode binary translator. Since then, it has stretched and flexed; we added x86-64 support, put it on a performance-focused diet, and improved its usability and documentation. McSema wasn’t the only thing improving these past years, though. At the...
Ballroom dancer, singer and television presenter Anton du Beke hosted the 13th White Hat Ball at London’s Lancaster Gate hotel
The NATO Cooperative Cyber Defence Centre of Excellence will coordinate education and training across the Alliance.
Only 11.3% of top US retailer and 12.2% of top EU retailer domains have fully implemented DMARC and SPF.
The median total cost of a ransomware attack was $133,000 last year, and most companies were hit twice.
Developers and infrastructure specialists will also benefit from a 3% pay raise