> TODAY'S SUMMARY (89 articles)
Today's cybersecurity landscape reveals several significant threats and trends. A major incident at BAE Systems has disrupted the US bankruptcy court system, halting official notices since October 9. Burger King Japan has reported a data breach affecting over 11 million customers, while CenterPoint Energy disclosed a breach impacting more than a million Texans. Notably, ransomware gangs are increasingly resorting to threats of physical violence to extort payments, and Chinese state-sponsored attackers exploited a newly identified zero-day vulnerability in BeyondTrust software for espionage. Additionally, vulnerabilities in various platforms, including Microsoft Office and Debian, have raised concerns about potential remote code execution and privilege escalation risks.
|
// AI-powered summary generated at 16:00
Yet just 0.5% of the top million domains have protected themselves from impersonation by DMARC email authentication.
The quarter saw a rise in attacks against accounting, biopharma, retail, biotech and pharmaceuticals.
In the year since we ported osquery to Windows, the operating system instrumentation and endpoint monitoring agent has attracted a great deal of attention in the open-source community and beyond. In fact, it recently received the 2017 O’Reilly Defender Award for best project. Many large and leading...
A new version of the BankBot Android mobile banking malware has snuck into Google Play, targeting apps of large banks.
Cyber-attack is another blow for digital currencies
Last week Zeppelin released their Ethereum CTF, Ethernaut. This CTF is a good introduction to discover how to interact with a blockchain and learn the basics of the smart contract vulnerabilities. The CTF is hosted on the ropsten blockchain, and you can receive free ethers for it. The browser develo...
Controversial certificate authority and parent company WoSign not trusted by browser makers
Businesses are urged to better protect key systems
We’re proud to announce that Trail of Bits has joined the Enterprise Ethereum Alliance (EEA), the world’s largest open source blockchain initiative. As the first information security company to join, and currently one of the industry’s top smart contract auditors, we’re excited to contribute our unp...
California, Florida, Illinois and New York are also in the top 10.
In Q3, organizations experienced an average of 237 DDoS attack attempts per month, equivalent to eight attempts every day.
We’ve added five more to our ranks in the last two months, bringing our total size to 32 employees. Their resumes feature words and acronyms like ‘CTO,’ ‘Co-founder’ and ‘Editor.’ You might recognize their names from publications and presentations that advance the field. We’re excited to offer them...
London police profiling public without appropriate legal framework
S3 buckets contain billions of citizens' internet records
RiskIQ warns that one in 25 are malicious
Banking giant estimates festive fraud will cost victims £1.63bn
Pawnbroker reportedly received email threat from hacker
It has man-in-the-middle (MITM) abilities to steal browsing information such as login credentials and stored credit-card information.
The apps don't request any suspicious permissions and they even mimic expected legitimate activity.
A number of stores did not receive an encryption upgrade to their point of sale devices.