> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape reveals significant threats and trends. Microsoft has patched two dozen remote code execution (RCE) flaws in Office, alongside other security issues, highlighting ongoing vulnerabilities in widely used software. A data breach at CenterPoint Energy has exposed personal information of over 1 million Texans, indicating continued risks for utility companies. Additionally, BeyondTrust has warned of a critical zero-day flaw in its Remote Support software, actively exploited since August. In a worrying trend, stolen AI API keys are being used for automated cyber scans, raising concerns about the misuse of legitimate technology. Lastly, the cybersecurity job market is experiencing a downturn, with postings hitting a four-year low, exacerbating the ongoing talent shortage in the field.
|
// AI-powered summary generated at 08:00
Understanding user behaviors and intent as they interact with critical business data is a key to greater security, but tools can’t keep up across clouds, devices and user locations.
Tim Wilson, CISO at Optum International, discusses how cyber-criminals piece together partial sources of information to construct an individual’s identity and form the basis of an attack
This blog has promoted control flow integrity (CFI) as a game changing security mitigation and encouraged its use. We wanted to take our own security advice and start securing software we use. To that end, we decided to apply CFI to facebook’s osquery, a cross-platform codebase with which we are dee...
Vovnenko will go away for 41 months for operating a 13K-strong botnet to steal credentials and financial information.
Global study shows new laws and regulations are also worrying firms
I recently had the privilege of giving a keynote at BSidesLisbon. I had a great time at the conference, and I’d like to thank Bruno Morisson for inviting me. If you’re into port, this is the conference for you! I recommend that anyone in the area consider attending next year. I felt there was a […]
Some of the victims are high-profile industrial, research or diplomatic targets.
There is large-scale eavesdropping on sensitive conversations via remotely controlled PC microphones.
In my first blog post, I introduced the general structure of Binary Ninja’s Low Level IL (LLIL), as well as how to traverse and manipulate it with the Python API. Now, we’ll do something a little more interesting. Reverse engineering binaries compiled from object-oriented languages can be challengin...
CSA+ will offer validation of skills required to use cyber-threat detection tools and perform data analysis.
Eset report urges victims not to pay up
Hi, I’m Josh. I recently joined the team at Trail of Bits, and I’ve been an evangelist and plugin writer for the Binary Ninja reversing platform for a while now. I’ve developed plugins that make reversing easier and extended Binary Ninja’s architecture support to assist in playing the microcorruptio...
Business used proxy servers and botnets to stay hidden
Multiple scholarships of up to $5,000 will be awarded, and international applicants are accepted.
Security professionals are worried, according to RSA Conference poll
Maliciously crafted personal apps to silently view, steal and even manipulate content in the Work profile of Android.
In an engaging keynote at RSA Conference 2017 Dame Stella Rimington reflected on her fascinating journey from academic librarian to the first female director general of the Security Service
At the RSA Conference in San Francisco, on February 16 2017, Infosecurity spoke to Kelly Bissell, managing director of Accenture Security
At the 12th security blogger meet-up at RSA Conference in San Francisco on February 15, 2017, the security blogger award winners were announced.
An expert panel discussed strategies and practical approaches to maximizing cyber testing programs and getting away from “hamster wheel” status quo practices.