> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape reveals significant threats and trends. Microsoft has patched two dozen remote code execution (RCE) flaws in Office, alongside other security issues, highlighting ongoing vulnerabilities in widely used software. A data breach at CenterPoint Energy has exposed personal information of over 1 million Texans, indicating continued risks for utility companies. Additionally, BeyondTrust has warned of a critical zero-day flaw in its Remote Support software, actively exploited since August. In a worrying trend, stolen AI API keys are being used for automated cyber scans, raising concerns about the misuse of legitimate technology. Lastly, the cybersecurity job market is experiencing a downturn, with postings hitting a four-year low, exacerbating the ongoing talent shortage in the field.
|
// AI-powered summary generated at 08:00
Android gamers that fall for them will find themselves bombarded with aggressive ads, scam activity and malware in the future.
New revelations from WikiLeaks has shown capabilities to break into Apple products
Break out your guayabera, it’s time for Infiltrate. Trail of Bits has attended every Infiltrate and has been a sponsor since 2015. The majority of the company will be in attendance this year (18 people!) and we’ll be swapping shirts and swag again. We’re looking forward to catching up with the lates...
Dragos cuts through the hype when it comes to attacks on industrial sites
GUI vulnerability could allow attackers to steal info or spread ransomware
McSema, our x86 machine code to LLVM bitcode binary translator, just got a fresh coat of paint. Last week we held a successful hackathon that produced substantial improvements to McSema’s usability, documentation, and code quality. It’s now easier than ever to use McSema to analyze and reverse-engin...
The flaw would allow remote code execution and the ability to steal users’ passwords.
About 300 unique victims have been identified in Latin America over the past month, and more than 100GB of data stolen.
This blog has promoted control flow integrity (CFI) as a game changing security mitigation and encouraged its use. We wanted to take our own security advice and start securing software we use. To that end, we decided to apply CFI to facebook’s osquery, a cross-platform codebase with which we are dee...
Ramnit is an information-stealer (including banking and FTP credentials), which has been around for several years.
The Necurs botnet has seen a recent spike in activity, shifting its intent from malware distribution to penny stock pump-and-dump spamming.
I recently had the privilege of giving a keynote at BSidesLisbon. I had a great time at the conference, and I’d like to thank Bruno Morisson for inviting me. If you’re into port, this is the conference for you! I recommend that anyone in the area consider attending next year. I felt there was a […]
Tens of thousands said to have been affected
Investigators pounce after postal workers raise alarm
In my first blog post, I introduced the general structure of Binary Ninja’s Low Level IL (LLIL), as well as how to traverse and manipulate it with the Python API. Now, we’ll do something a little more interesting. Reverse engineering binaries compiled from object-oriented languages can be challengin...
A new, advanced point-of-sale (PoS) malware is taking aim at businesses across North America and Canada.
The vulnerability affects more than 40 of its products.
US government contracts could be a roadblock, it claims
According to Brian Krebs, the likely vector for the hack is Select’s PoS vendor.
Lack of public consultation over data sharing agreement and no regulatory oversight criticized in academic report