> TODAY'S SUMMARY (44 articles)
Today's cyber news highlights several critical threats and trends impacting security. A cyber incident at BAE Systems has disrupted U.S. federal bankruptcy court operations, indicating vulnerabilities in defense contractor systems. The FBI has issued a warning about scammers cloning candidate voices to steal personal and financial data ahead of the 2026 midterm elections. Additionally, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical BeyondTrust flaw to its Known Exploited Vulnerabilities catalog, exploited by a suspected Chinese espionage group. Moreover, a data breach at CenterPoint Energy has compromised the personal information of over one million Texans. On the malware front, PEERSTITCH has been identified exploiting Fortinet vulnerabilities, demonstrating an ongoing trend of sophisticated attacks leveraging zero-day flaws.
|
// AI-powered summary generated at 12:00
Rapid7 explains importance of holistic approach to testing
In the Infosecurity Europe keynote discussion about risks, threats and adversaries, Rik Ferguson, VP Security Research at Trend Micro and advisor to Europol and James Lyne, security researcher at Sophos, talked about the latest cyber-risks.
Manticore is a next-generation binary analysis tool with a simple yet powerful API for symbolic execution, taint analysis, and instrumentation. Using Manticore one can identify ‘interesting’ code locations and deduce inputs that reach them. This can generate inputs for improved test coverage, or qui...
In independent testing, the average security effectiveness rating was 67.3%.
Time for a shift in thinking if we are to improve user behavior
DDoS attacks are all too commonly thought of as “someone else’s” problem, but botnets are all too easily formed
It is likely that we will see yet more additional payloads for the tool.
Booz Allen Hamilton blames human error
Firms experience an average of 40 actionable incidents per week, but only a quarter (27%) think they are coping.
In Kmart's second breach in three years, chip-and-PIN card readers significantly contained the fallout.
The Fancy Bear/APT28 hacking group, using the nickname "Tsar Team,” is behind the attack, according to reports.
Fireball is adware, and can be turned into a fully functioning malware downloader.
Identity management and Single Sign-On vendor OneLogin has reported an unauthorized access issue, which may have compromised customer data.
The British healthcare system experienced 2447 incidents and accounted for 43% of all reported incidents between January 2014 and December 2016
Early phishing detection, click-time warnings for malicious links and unintended external reply warnings are all new.
Control Risks says IT teams need to communicate better with C-level
Google was forced to remove over 40 apps from Play store
NATO CCD COE has added two new member states, and two more will soon follow.
All of the programmers that White Scope examined had outdated software with known vulnerabilities. Many of them run Windows XP.
The Russian hackers behind the break-in at the DNC have been caught inserting fake information into stolen documents.