> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Five more Chinese organizations are blacklisted
State's Department of Human Services is found wanting on cyber awareness
Interacting with Active Directory on the Mac Did you ever have to interact with Active Directory on a MAC?
If yes, this post might be interesting for you. I am pretty new to the Mac and basic things I know how to do on Windows need some research to figure out. This time around I explore Active Direc...
CISA boss says “wiper” raids may be on their way
The majority of devices still support weak protocols, report says.
Since March, Trail of Bits has been working with the Python Software Foundation to add two-factor authentication (2FA) to Warehouse, the codebase that powers PyPI. As of today, PyPI members can enable time-based OTP (TOTP) and WebAuthn (currently in beta). If you have an account on PyPI, go enable y...
PC-Doctor issues a fix for a severe vulnerability that could affect multiple laptops.
A malicious employee is fired for unauthorized access to member data.
Three weeks ago, we presented our work on Slither at WETSEB, an ICSE workshop. ICSE is a top-tier academic conference, focused on software engineering. This edition of the event went very well. The organizers do their best to attract and engage industrials to the discussions. The conference had many...
There’s much more to 5G security than Huawei, says NCSC.
LoudMiner uses virtualization software to mine cryptocurrency
QueryCon takes place this week at the Convene Conference Center in Downtown Manhattan, Thursday June 20th- Friday June 21st. If you don’t have a ticket yet, get one while you can. QueryCon is an annual conference about osquery, the open source project that’s helping many top tech companies manage th...
76% of mobile apps store data insecurely, a new Positive Technologies report says.
Since 2008, the US has seen nearly 10,000 data breaches, the report says.
Trail of Bits has released Indurative, a cryptographic library that enables authentication of a wide variety of data structures without requiring users to write much code. Indurative is useful for everything from data integrity to trustless distributed systems. For instance, developers can use Indur...
Victims are lured into downloading malware via an email pretending to be from the US's DHS.
DCMS to announce that age verification scheme is to be delayed
Earlier this week, Manticore leapt forward to version 0.3.0. Advances for our symbolic execution engine now include: “fast forwarding” through concrete execution that you don’t care about, support for Linux binaries statically compiled for AArch64, and an interface for selectively solving for intere...
Riviera Beach chooses not to follow advice of law enforcement
Cifas figures also reveal a sharp increase in money mule activity