> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape reveals significant threats and trends. Microsoft has patched two dozen remote code execution (RCE) flaws in Office, alongside other security issues, highlighting ongoing vulnerabilities in widely used software. A data breach at CenterPoint Energy has exposed personal information of over 1 million Texans, indicating continued risks for utility companies. Additionally, BeyondTrust has warned of a critical zero-day flaw in its Remote Support software, actively exploited since August. In a worrying trend, stolen AI API keys are being used for automated cyber scans, raising concerns about the misuse of legitimate technology. Lastly, the cybersecurity job market is experiencing a downturn, with postings hitting a four-year low, exacerbating the ongoing talent shortage in the field.
|
// AI-powered summary generated at 08:00
The opening keynote at RSA Conference 2017 San Francisco was presented by Dr Zulfikar Ramzan, CTO at RSA Security. He was later joined on stage by Michael Dell.
British firms least likely to have a ‘cloud first’ strategy, says Intel Security
In my first blog post, I introduced the general structure of Binary Ninja’s Low Level IL (LLIL), as well as how to traverse and manipulate it with the Python API. Now, we’ll do something a little more interesting. Reverse engineering binaries compiled from object-oriented languages can be challengin...
Users can now pay others by speaking to their app
Uber's Dan Borges on how the company uses custom email IDS to tackle email-based phishing
Hi, I’m Josh. I recently joined the team at Trail of Bits, and I’ve been an evangelist and plugin writer for the Binary Ninja reversing platform for a while now. I’ve developed plugins that make reversing easier and extended Binary Ninja’s architecture support to assist in playing the microcorruptio...
The centerpiece of this platform is IBM QRadar Advisor with Watson, the first tool that taps into Watson’s corpus of cybersecurity insights.
Users urged to patch with version 4.7.2
John Oliver may have written off 2016, but we’re darn proud of all that we accomplished and contributed this year. We released a slew of the security tools that help us -and you- work smarter, and promoted a few more that deserved recognition. We helped the New York City InfoSec community build a fo...
NCSC boss warns of ‘step change’ in Russian aggression
Infamous Lazarus Group linked to attacks
Owned by two UK citizens, Y-Internet sold illegal IPTV with annual contracts to hotels, pubs, neighborhoods and individuals.
Many enterprises are overly exposing their AD administrator’s credentials.
The event involved malicious software installed on payment card systems at hundreds of its corporate-owned restaurant locations across the US.
Phishers try to socially engineer concerned netizens
Retail giant reportedly spilled employee details last September
Most believe they’ll be targeted over coming year, says BAE Systems
These targeted attacks use only legitimate software and target banks, telecoms and government organizations.
Only 33% have no found vulnerabilities, showing significant needed improvement on enterprise security.
Sophos has announced the intention to acquire Invincea and add machine learning-based predictive malware detection to its portfolio