> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape reveals significant threats and trends. Microsoft has patched two dozen remote code execution (RCE) flaws in Office, alongside other security issues, highlighting ongoing vulnerabilities in widely used software. A data breach at CenterPoint Energy has exposed personal information of over 1 million Texans, indicating continued risks for utility companies. Additionally, BeyondTrust has warned of a critical zero-day flaw in its Remote Support software, actively exploited since August. In a worrying trend, stolen AI API keys are being used for automated cyber scans, raising concerns about the misuse of legitimate technology. Lastly, the cybersecurity job market is experiencing a downturn, with postings hitting a four-year low, exacerbating the ongoing talent shortage in the field.
|
// AI-powered summary generated at 08:00
Attackers can access victims’ personal and group conversations, photos, videos, shared files, contact list and more.
Every key market on the globe suffers from a lack of women in the workforce, severe wage gaps and a dearth of female executives.
McSema, our x86 machine code to LLVM bitcode binary translator, just got a fresh coat of paint. Last week we held a successful hackathon that produced substantial improvements to McSema’s usability, documentation, and code quality. It’s now easier than ever to use McSema to analyze and reverse-engin...
Accounts belonging to BBC, Amnesty and security expert Graham Cluley among those used to send pro-Turkey messages
Cyber-criminals are stealing from their peers in the latest ransomware family example, dubbed PetrWrap.
This blog has promoted control flow integrity (CFI) as a game changing security mitigation and encouraged its use. We wanted to take our own security advice and start securing software we use. To that end, we decided to apply CFI to facebook’s osquery, a cross-platform codebase with which we are dee...
The two-and-a-half-year-old data breach is ultimately going to cost the DIY purveyor as much as $179 million, possibly much more.
About 35% of the leaked LinkedIn passwords were already known from previous password dictionaries.
I recently had the privilege of giving a keynote at BSidesLisbon. I had a great time at the conference, and I’d like to thank Bruno Morisson for inviting me. If you’re into port, this is the conference for you! I recommend that anyone in the area consider attending next year. I felt there was a […]
Russian hacking of US election could happen here, spy agency boss warns UK politicians
There are roughly 3,700 DDoS attacks per day.
In my first blog post, I introduced the general structure of Binary Ninja’s Low Level IL (LLIL), as well as how to traverse and manipulate it with the Python API. Now, we’ll do something a little more interesting. Reverse engineering binaries compiled from object-oriented languages can be challengin...
Discovery by Palo Alto researchers appears to suggest ransomware authors have shifted tactics from financial to political motivation
From the highest levels of organized crime to burglary, criminals are using technology more than ever, Europol report warns
The majority of the exploitation attempts of the bug seem to be leveraging a publicly released proof of concept (PoC).
33% paid the ransom and recovered their data, 54% refused to pay but recovered their data anyway.
Confide - popular with White House aides - could have leaked sensitive user information
RansomWorm spreads inside throughout the entire network to encrypt every server and computer—and the backups.
Symantec research shows that employees use their personal device for work, but are clueless about the security implications
Publication of the BRC Cyber Security Toolkit aims to help retailers protect themselves and their customers