> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Maintaining the site at its level of growth has become overwhelming for Troy Hunt.
FTSE 250+ organizations leave an average of 35 servers and devices exposed
Earlier this week, Manticore leapt forward to version 0.3.0. Advances for our symbolic execution engine now include: “fast forwarding” through concrete execution that you don’t care about, support for Linux binaries statically compiled for AArch64, and an interface for selectively solving for intere...
Asperger’s syndrome sufferer sentenced to young offender institute
Data on tens of thousands is reportedly stolen
The Google Login Flow leaks additional email account information to unauthenticated users. I discovered this in the Google Account Login flow while building KoiPhish.
Responsible Disclosure I reported this issue to Google and they looked into it and after a about 5 weeks of back and forth they decid...
Misconfigured Elasticsearch database again to blame
Spammers using Google services, including Calendar, Photos and Forms.
System administrators use osquery for endpoint telemetry and daily monitoring. Security threat hunters use it to find indicators of compromise on their systems. Now another audience is discovering osquery: forensic analysts. While osquery core is great for querying various system-level data remotely...
Community members learn of breach from haveibeenpwned.com notice.
Total funding surpasses $200 million.
If unit tests are important to you, there’s now another reason to use DeepState, our Google-Test-like property-based testing tool for C and C++. It’s called Eclipser, a powerful new fuzzer very recently presented in an ICSE 2019 paper. We are proud to announce that Eclipser is now fully integrated i...
FOI request reveals 2.6m reports over past three years
Phishing emails contain malicious RTF files
Consider our modular trainings. They can be organized to suit your company’s needs. You choose the number of skills and days to spend honing them.
Researchers warn of new automated password-cracking threat
Victims told their names were found in large investigation of online pedophiles.
We have published an academic paper on Slither, our static analysis framework for smart contracts, in the International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB), colocated with ICSE. Our paper shows that Slither’s bug detection outperforms other static analysis too...
Plug-in displays ads on user's lock screen.
Entrust Datacard positions itself to grow with general purpose HSM market.