> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
ENISA rebrands to EU Cybersecurity Agency in new role boosting European Act
Symantec report paints alarming picture of skills crisis
A common Go idiom is to (1) panic, (2) recover from the panic in a deferred function, and (3) continue on. In general, this is okay, so long there are no global state changes between the entry point to the function calling defer, and the point at which the panic occurs. Such global state changes […]
Terbium Labs calls for bigger anti-fraud effort from financial institutions
The mayor of Lake City, Florida, says the city will pay the $460,000 ransom.
Each year, Trail of Bits runs a month-long winter internship aka “winternship” program. This year we were happy to host 4 winterns who contributed to 3 projects. This project comes from Carson Harmon, a new graduate from Purdue interested in compilers and systems engineering, and a new full-time mem...
The Jeff Bleich Centre for the US Alliance in Digital Technology, Security and Governance will open in Adelaide, Australia.
At Cyber Week 2019, Netanyahu says Israel's cybersecurity contributions have helped allies protect against terrorism.
Interacting with Active Directory on the Mac Did you ever have to interact with Active Directory on a MAC?
If yes, this post might be interesting for you. I am pretty new to the Mac and basic things I know how to do on Windows need some research to figure out. This time around I explore Active Direc...
FireEye reveals use of legitimate services to deliver malware
Cyber-criminals use search ads for recipes to lure victims
Since March, Trail of Bits has been working with the Python Software Foundation to add two-factor authentication (2FA) to Warehouse, the codebase that powers PyPI. As of today, PyPI members can enable time-based OTP (TOTP) and WebAuthn (currently in beta). If you have an account on PyPI, go enable y...
London police force failing to deal promptly with subject access requests
The US Senate proposes a law to broaden data oversight and regulations.
Three weeks ago, we presented our work on Slither at WETSEB, an ICSE workshop. ICSE is a top-tier academic conference, focused on software engineering. This edition of the event went very well. The organizers do their best to attract and engage industrials to the discussions. The conference had many...
Dominion National announced that it is addressing a security incident.
Mobile fraud is less-targeted, but not for long
QueryCon takes place this week at the Convene Conference Center in Downtown Manhattan, Thursday June 20th- Friday June 21st. If you don’t have a ticket yet, get one while you can. QueryCon is an annual conference about osquery, the open source project that’s helping many top tech companies manage th...
New fraud opportunities are emerging as attacks become more complex
Collaboration is key to preventing online fraud