> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Concerns mount over potential disruption of the US's 2020 presidential election.
Cryptolocker malware increased by 167% in Q1 2019, report says.
Earlier this week, Manticore leapt forward to version 0.3.0. Advances for our symbolic execution engine now include: “fast forwarding” through concrete execution that you don’t care about, support for Linux binaries statically compiled for AArch64, and an interface for selectively solving for intere...
Burlington, Ontario, was a victim of a "complex phishing email."
Only UK courts now stand between WikiLeaks founder and US trial
The Google Login Flow leaks additional email account information to unauthenticated users. I discovered this in the Google Account Login flow while building KoiPhish.
Responsible Disclosure I reported this issue to Google and they looked into it and after a about 5 weeks of back and forth they decid...
Researchers urge admins to patch Exim installations now
New documents detail “extraordinary and persistent illegality”
System administrators use osquery for endpoint telemetry and daily monitoring. Security threat hunters use it to find indicators of compromise on their systems. Now another audience is discovering osquery: forensic analysts. While osquery core is great for querying various system-level data remotely...
Aircraft parts manufacturer ASCO decided to temporarily close its Belgium office
The gaming industry is increasingly the target of cyber-criminals looking to turn a quick profit.
If unit tests are important to you, there’s now another reason to use DeepState, our Google-Test-like property-based testing tool for C and C++. It’s called Eclipser, a powerful new fuzzer very recently presented in an ICSE 2019 paper. We are proud to announce that Eclipser is now fully integrated i...
The third-party breach at American Medical Collection Agency has impacted millions of patients.
Companies are failing to effectively manage password security
Consider our modular trainings. They can be organized to suit your company’s needs. You choose the number of skills and days to spend honing them.
Code flaw could have allowed threat actors to extract personal information from the browser environment
Dubbed a cybersecurity unicorn, KnowBe4's valuation soars to $1bn.
Some Philadelphia Court systems are still down three weeks post-attack
A Google researcher reported a Windows vulnerability as part of Project Zero.
XSS is the most rewarding security vulnerability, according to data on the number of bug bounties paid