> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Developers should be careful which cloud-based services they connect to, researchers warned this week.
BioStar 2's public data exposure could spell disaster for users, warn experts.
Ce billet traite de l’actualité, et parle des failles VxWorks ‘Urgent/11′, d’une étude sur le retour d’expérience concernant les référentiels de cybersécurité industrielle, et des places disponibles pour une formation 1 journée « Cybersécurité industrielle » pour personnel expérimenté en sécurité de...
Admins urged to prioritize wormable bugs
Check-in links contained sensitive unencrypted details
People interested in joining Trail of Bits often ask us what it’s like to work on the Engineering Services team. We felt that the best answer would be a profile of some of the talented individuals on our team, and let them describe their experiences at Trail of Bits in their own words. Today, we’re...
SCA is a key part of the new PSD2 rules
Cyber-savvy businesses in Canada could get certification to prove they take care of customer data.
Until now, smart contract security researchers (and developers) have been frustrated by limited information about the actual flaws that survive serious development efforts. That limitation increases the risk of making critical smart contracts vulnerable, misallocating resources for risk reduction, a...
Support for FIDO2 in Android allows users to log into some Google services with a fingerprint.
Three months after BlueKeep, there's a new set of RDP vulnerabilities in town—and this time, they affect Windows 10.
In an age of online second-hand retailers, marketplace exchanges, and third-party refurb shops, it’s easier than ever to save hundreds of dollars when buying a phone. These channels provide an appealing alternative for people foregoing a retail shopping experience for a hefty discount. However, ther...
Agari warns organizations to be on the lookout for reconnaissance efforts
Digicert claims no security benefit from proposal for 13-month lifecycles
Broadly, an end-to-end encrypted messaging protocol is one that ensures that only the participants in a conversation, and no intermediate servers, routers, or relay systems, can read and write messages. An end-to-end encrypted group messaging protocol is one that ensures this for all participants in...
DCPCU warns that criminals are moving from drug trafficking to online fraud
How a teenager discovered multiple vulnerabilities within software applications used in his school.
Note: This blog has been reposted from Truffle Suite’s blog. We are proud to announce our new smart contract security product: https://crytic.io/. Crytic provides continuous assurance for smart contracts. The platform reports build status on every commit and runs a suite of security analyses for imm...
Members of NCATS outlined their mission and their challenges for election security.
The hidden threat of paying for subscription services.