> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Alert Logic report has some quick win advice for SMBs
Germantown, Tenn., has restricted the email account of an alderman who refuses to undergo 45 minutes of cybersecurity training
This year’s IACR Crypto conference was an excellent blend of far-out theory and down-to-earth pragmatism. A major theme throughout the conference was the huge importance of getting basic cryptographic primitives right. Systems ranging from TLS servers and bitcoin wallets to state-of-the-art secure m...
A misconfigured database has led to the leak of data on almost every Ecuadorian citizen
Phillip Capital has been fined after its poor cybersecurity led to a $1m theft
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Reports suggest suspicions that firm broke defense export laws
Lazarus Group, Bluenoroff and Andariel are called out by Washington
We are proud to announce the integration of ensemble fuzzing into DeepState, our unit-testing framework powered by fuzzing and symbolic execution. Ensemble fuzzing allows testers to execute multiple fuzzers with varying heuristics in a single campaign, while maintaining an architecture for synchroni...
DEFRA and Environment Agency respond to FOI requests
Symantec lays off hundreds of employees amid buyout rumors
As a summer intern at Trail of Bits, I’ve been working on building Fennec, a tool to automatically replace function calls in compiled binaries that’s built on top of McSema, a binary lifter developed by Trail of Bits. The Problem Let’s say you have a compiled binary, but you […]
Coalfire employees charged with burglary of courthouse that had hired firm to carry out security checks
Milwaukee School of Engineering opens new cybersecurity facility funded by $34m donation from former student
Recently Coinbase published a well written blog post on how they were under attack. The adversaries exploite Firefox 0-days. Details can be found here. One intersting aspect is the following:
“We have also observed the attackers specifically target cloud services, e.g. gmail and others, via browser...
How consistent API flaws allowed IoT devices to be hacked
The steps to take to ensure your mental health stability
KLEE-Native, a fork of KLEE that operates on binary program snapshots by lifting machine code to LLVM bitcode.
Dealer Leads leaves 413GB of data publicly accessible
Cobalt Dickens continues its long-running quest for data