> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape reveals significant threats and trends. Microsoft has patched two dozen remote code execution (RCE) flaws in Office, alongside other security issues, highlighting ongoing vulnerabilities in widely used software. A data breach at CenterPoint Energy has exposed personal information of over 1 million Texans, indicating continued risks for utility companies. Additionally, BeyondTrust has warned of a critical zero-day flaw in its Remote Support software, actively exploited since August. In a worrying trend, stolen AI API keys are being used for automated cyber scans, raising concerns about the misuse of legitimate technology. Lastly, the cybersecurity job market is experiencing a downturn, with postings hitting a four-year low, exacerbating the ongoing talent shortage in the field.
|
// AI-powered summary generated at 08:00
Bath university researchers will start project today
El Paso bootmaker suffered serious downtime and extra costs following incident
Break out your guayabera, it’s time for Infiltrate. Trail of Bits has attended every Infiltrate and has been a sponsor since 2015. The majority of the company will be in attendance this year (18 people!) and we’ll be swapping shirts and swag again. We’re looking forward to catching up with the lates...
For every new malware detection technique, an equivalent evasion technique is created out of necessity.
The UK’s CyberFirst Girls’ competition saw 37 young ladies representing 10 teams displaying impressive code-cracking abilities.
McSema, our x86 machine code to LLVM bitcode binary translator, just got a fresh coat of paint. Last week we held a successful hackathon that produced substantial improvements to McSema’s usability, documentation, and code quality. It’s now easier than ever to use McSema to analyze and reverse-engin...
One in four of all legal firms have been the subject of a cyber-attack
Dubbed WP-Base-SEO, the plugin is a forgery of a legitimate search engine optimization plugin.
New ransomware technique dubbed 'What You See Is What You Encrypt'
US college under fire from app-layer attack
Every fourth targeted attack detected by Kaspersky Lab in 2016 was aimed at industrial targets.
Maxim Senakh said to have benefitted from scams that made millions
Encrypted details are stolen on two laptops
Trend Micro CTO was 54
A scareware attack is targeting Apple iPhone and iPad users, “locking” their browsers unless they pay a ransom.
1,792 data breaches led to almost 1.4 billion data records being compromised worldwide during 2016.
Nokia report reveals 83% increase in smartphone infections
Google’s Ormandy once again the bearer of bad news
Home secretary wants firms to break end-to-end encryption
Criminals are accessing protected health and personally identifiable info to intimidate, harass and blackmail business owners.