> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
As a summer intern at Trail of Bits, I’ve been working on building Fennec, a tool to automatically replace function calls in compiled binaries that’s built on top of McSema, a binary lifter developed by Trail of Bits. The Problem Let’s say you have a compiled binary, but you […]
Unknown number of customers had personal data compromised
FOI request reveals email security challenges
Recently Coinbase published a well written blog post on how they were under attack. The adversaries exploite Firefox 0-days. Details can be found here. One intersting aspect is the following:
“We have also observed the attackers specifically target cloud services, e.g. gmail and others, via browser...
Another U.S. municipality wants to ban facial recognition technology
Google researchers have detected a sustained zero-day attack on Apple iOs devices.
KLEE-Native, a fork of KLEE that operates on binary program snapshots by lifting machine code to LLVM bitcode.
India announces plan to issue its seafarers with biometric identity cards.
Trend Micro mid-year report warns of growing efforts to keep attacks hidden
We open-sourced a set of static analysis tools, KRFAnalysis, that analyze and triage output from our system call (syscall) fault injection tool KRF. Now you can easily figure out where and why, KRF crashes your programs. During my summer internship at Trail of Bits, I worked on KRF, […]
Talented researchers benefit from bug bounty pay-outs
Google says it will not be able to supply flagship Mate 30
During my summer at Trail of Bits, I took full advantage of the latest C++ language features to build a new SQLite wrapper from scratch that is easy to use, lightweight, high performant, and concurrency friendly—all in under 750 lines of code.
Cyber-criminals pose as job seekers to deliver Quasar RAT.
A Swedish municipality may still introduce facial recognition technology in schools despite receiving the country’s first GDPR violation fine for trialing it.
No one should beat your security team on the homefield! For several years I have been using the term Homefield Advantage in the context of running a security program, especially in regards to certain aspects of red teaming. Homefield Advantage describes well what a mature security program has to rea...
Malicious apps that clicks ads on the sly have been discovered on Google Play Store.
Juniper Research claims staff training will become increasingly important
Today I finalized moving the blog and publishing to Hugo. It was pretty straight forward and I decided to move things into a master branch on github, and publish via the docs/ folder features of Github pages.
New indictment reveals charges carrying penalties of up to 25 years