> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Organization aims to help victims, improve accountability and develop behavioral norms
Earlier today, a new iPhone Boot ROM exploit, checkm8 (or Apollo or Moonshine), was published on GitHub by axi0mX, affecting the iPhone 4S through the iPhone X. The vulnerability was patched in devices with A12 and A13 CPUs. As of this writing, the iPhone XS, XS Max, XR, 11, 11 Pro and 11 Pro Max […...
Professor of law awarded $625,000 to propose cyber-harassment reforms
Trojan-delivered spyware uses messaging app to exfiltrate stolen information
Has it really been 3 months since Trail of Bits hosted QueryCon? We’ve had such a busy and productive summer that we nearly forgot to go back and reflect on the success of this event! On June 20-21, Trail of Bits partnered with Kolide and Carbon Back to host the 2nd annual QueryCon, at the […]
State of New York accuses donut chain of failing to protect customers
Venafi reveals low levels of trust in governments’ data protection promises
This year’s IACR Crypto conference was an excellent blend of far-out theory and down-to-earth pragmatism. A major theme throughout the conference was the huge importance of getting basic cryptographic primitives right. Systems ranging from TLS servers and bitcoin wallets to state-of-the-art secure m...
Unsolicited texts from legitimate lenders look like scams
Delivery service only discovered May incident earlier this month
A fight to control the digital infrastructure of a miniature city will take place at HITB + Cyber Week
A cybersecurity information-sharing resource has been launched to help healthcare organizations in the US
The Lone Star State calls for applications to certify cybersecurity training
Cloud native apps rarely secured using DevOps strategies
Digital skimming takes a new turn in the quest for more victims
Another Elasticsearch database found unprotected online
Elliott Gunton wanted for attack on cryptocurrency exchange
Job-seeking veterans targeted by threat group Tortoiseshell
Staff switching jobs within a company are retaining unnecessary access rights
Popular remote working tool is favored hunting ground of cyber-criminals