> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
A raid on the Australian Broadcasting Corp. is a sign that journalists may need to do more to protect their data and sources.
The average number of third party connections to a facility is 583
The Google Login Flow leaks additional email account information to unauthenticated users. I discovered this in the Google Account Login flow while building KoiPhish.
Responsible Disclosure I reported this issue to Google and they looked into it and after a about 5 weeks of back and forth they decid...
A focus on reducing detection and response times is crucial
Usability will always trump security problems, says HaveIBeenPwned founder
System administrators use osquery for endpoint telemetry and daily monitoring. Security threat hunters use it to find indicators of compromise on their systems. Now another audience is discovering osquery: forensic analysts. While osquery core is great for querying various system-level data remotely...
Security focus needs to be on solutions, not fear-mongering, says Ciaran Martin
#Infosec19: DNS rebinding attacks could hit billions of IoT devices
If unit tests are important to you, there’s now another reason to use DeepState, our Google-Test-like property-based testing tool for C and C++. It’s called Eclipser, a powerful new fuzzer very recently presented in an ICSE 2019 paper. We are proud to announce that Eclipser is now fully integrated i...
Access to FTSE 100 and Fortune 500 corporate networks has increased on the dark web.
The review was part of an annual audit plan to ensure the TVA's websites and emails were federally compliant.
Consider our modular trainings. They can be organized to suit your company’s needs. You choose the number of skills and days to spend honing them.
A weak evidence base and lack of business case has made it difficult for the Cabinet Office to assess whether it will meet all its objectives.
Funding will be used to accelerate the company's displacement of legacy and next-gen competitors.
We have published an academic paper on Slither, our static analysis framework for smart contracts, in the International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB), colocated with ICSE. Our paper shows that Slither’s bug detection outperforms other static analysis too...
Identify and protect your “very attacked people” as attackers look for high value targets
The business is key to defining the most critical systems to secure
Pourquoi il faut arrêter de diffuser les failles génériques
Les annonces concernant des vulnérabilités très larges se multiplient, contribuant à embrouiller encore plus la situation des SI industriel et orientant vers des solutions non pertinentes. Faux problème, vraie confusion : pourquoi [...] Li...
Inga Beale says industry needs more data to offer better products
Security pros must understand what digital transformation means for the business