> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Orgs failing on privileged access security strategies
A Rapid7 report reveals the most common external and internal weaknesses present in companies.
Cela devient de fait le rendez-vous français de la rentrée sur le sujet de la cybersécurité industrielle, avec une participation croissante chaque année.
Les inscriptions sont ouvertes pour cette journée qui se déroulera le 26 septembre [...] Lire la suite
Under-fire Chinese tech giant could be in more hot water
Latest study finds global average for losses creeps up to $3.92m
Trail of Bits recently completed a security assessment of Kubernetes, including its interaction with Docker. Felix Wilhelm’s recent tweet of a Proof of Concept (PoC) “container escape” sparked our interest, since we performed similar research and were curious how this PoC could impact Kubernetes. Qu...
Hackers posted a series of bizarre messages
Asia Pacific and Japanese governments are enabling law enforcement to monitor citizen behavior, says Charity Wright.
Trail of Bits was among the select companies that Forrester invited to participate in its recent report, The Forrester Wave™: Midsize Cybersecurity Consulting Services, Q2 2019. In this evaluation, Trail of Bits was cited as a Leader. We received the highest score among all participants in the curre...
The information-stealing TrickBot Trojan is disguised as Chrome and Firefox browser updates.
The total settlement payout could be as much as $700 million.
LibraBFT is the Byzantine Fault Tolerant (BFT) consensus algorithm used by the recently released Libra cryptocurrency. LibraBFT is based on another BFT consensus algorithm called HotStuff. While some have noted the similarities between the two algorithms, they differ in some crucial respects. In thi...
Harald Martin III said to have wilfully retained defense information
Hackers scanned for vulnerable organizations
Here at Trail of Bits we review a lot of code. From major open source projects to exciting new proprietary software, we’ve seen it all. But one common denominator in all of these systems is that for some inexplicable reason people still seem to think RSA is a good cryptosystem to use. Let me save […...
Major compromise lifts lid on secretive Kremlin projects
New information prompts Slack to change passwords on user accounts.
One thing every red team should attempt early on and regularly is to perform some password spray testing across their organization to identify and help remediate usage of weak passwords.
In the past I have done this on Windows a lot, but now I built a simple version for it for Bash to run it also fr...
One-third of financial CIOs report suffering an outage in the past six months.
Malware framework is reportedly responsible for 1 billion fraudulent Google AdSense ad impressions.