> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Exposed data included unique email addresses and passwords
Reclassifying phishing attacks, and the ways to help users spot them
In an age of online second-hand retailers, marketplace exchanges, and third-party refurb shops, it’s easier than ever to save hundreds of dollars when buying a phone. These channels provide an appealing alternative for people foregoing a retail shopping experience for a hefty discount. However, ther...
Raids on cryptocurrency exchanges help Pyongyang’s WMD program, says UN
At Black Hat USA in Las Vegas, Anomali threat research team manager Joakim Kennedy explained to Eleanor Dallaway why he believes the open source movement in the cybersecurity industry will help to address the skills gap in the industry
Broadly, an end-to-end encrypted messaging protocol is one that ensures that only the participants in a conversation, and no intermediate servers, routers, or relay systems, can read and write messages. An end-to-end encrypted group messaging protocol is one that ensures this for all participants in...
The Black Hat USA keynote encourages better collaboration and a more positive culture
LokiBot is getting stealthier and is now hiding its devastating payload in image files.
Note: This blog has been reposted from Truffle Suite’s blog. We are proud to announce our new smart contract security product: https://crytic.io/. Crytic provides continuous assurance for smart contracts. The platform reports build status on every commit and runs a suite of security analyses for imm...
Forget wardriving; warshipping is a more targeted way to hit a company's wireless network, says IBM.
LeapFrog's Pet Chat app was leaking children's location, say researchers.
Cela devient de fait le rendez-vous français de la rentrée sur le sujet de la cybersécurité industrielle, avec une participation croissante chaque année.
Les inscriptions sont ouvertes pour cette journée qui se déroulera le 26 septembre [...] Lire la suite
Why the world needs to empower technologists
Now Politicians and boards know cybersecurity, what do we do with the attention?
Trail of Bits recently completed a security assessment of Kubernetes, including its interaction with Docker. Felix Wilhelm’s recent tweet of a Proof of Concept (PoC) “container escape” sparked our interest, since we performed similar research and were curious how this PoC could impact Kubernetes. Qu...
DoJ indicts man who allegedly paid staff hundreds of thousands
Symantec report reveals app adoption is outpacing security efforts
Firms and consumers urged to patch
Democrats CISO talks of need to tear up "basics" checklist
I Am the Cavalry reflect on six years of achievement and contemplate next steps