> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
France teams up with Avast to cure 850,000 computers of the Retadup virus.
Jens Stoltenberg goes on record to outline NATO’s new combined defensive stance
During my summer at Trail of Bits, I took full advantage of the latest C++ language features to build a new SQLite wrapper from scratch that is easy to use, lightweight, high performant, and concurrency friendly—all in under 750 lines of code.
Google removes PDF creator after Kaspersky research
Some users of Incapsula Cloud Web App Firewall are at risk
No one should beat your security team on the homefield! For several years I have been using the term Homefield Advantage in the context of running a security program, especially in regards to certain aspects of red teaming. Homefield Advantage describes well what a mature security program has to rea...
CISA looking to step up protection of voter registration databases
A new threat group has been observed targeting oil and gas companies in the Middle East.
Today I finalized moving the blog and publishing to Hugo. It was pretty straight forward and I decided to move things into a master branch on github, and publish via the docs/ folder features of Github pages.
A quarter of IT security professionals surveyed admit they would steal company information to land a more senior role with a competitor.
The British government has launched a UK-wide competition aimed at bringing 5G to rural communities.
Ce billet traite de l’actualité, et parle des failles VxWorks ‘Urgent/11′, d’une étude sur le retour d’expérience concernant les référentiels de cybersécurité industrielle, et des places disponibles pour une formation 1 journée « Cybersécurité industrielle » pour personnel expérimenté en sécurité de...
The many new CPU hardware security challenges that Linux developers have faced in the past year
Original patch was accidentally rolled back by Cupertino
People interested in joining Trail of Bits often ask us what it’s like to work on the Engineering Services team. We felt that the best answer would be a profile of some of the talented individuals on our team, and let them describe their experiences at Trail of Bits in their own words. Today, we’re...
The security challenges and opportunities facing organizations that build open source projects on GitHub
Insurer Gallagher claims incidents cost over £8bn last year
Kent man made cryptocurrency fortune from phishing campaigns
Connected devices potentially represent a large risk to the safety and security of the internet
Up to 14 million accounts may have been affected by a data breach at web hosting company Hostinger.