> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape reveals significant threats and trends. Microsoft has patched two dozen remote code execution (RCE) flaws in Office, alongside other security issues, highlighting ongoing vulnerabilities in widely used software. A data breach at CenterPoint Energy has exposed personal information of over 1 million Texans, indicating continued risks for utility companies. Additionally, BeyondTrust has warned of a critical zero-day flaw in its Remote Support software, actively exploited since August. In a worrying trend, stolen AI API keys are being used for automated cyber scans, raising concerns about the misuse of legitimate technology. Lastly, the cybersecurity job market is experiencing a downturn, with postings hitting a four-year low, exacerbating the ongoing talent shortage in the field.
|
// AI-powered summary generated at 08:00
The sector's own financial regulator was ironically the original source of the compromise.
But Microsoft claims UK users are most insulated in the world
Hi, I’m Josh. I recently joined the team at Trail of Bits, and I’ve been an evangelist and plugin writer for the Binary Ninja reversing platform for a while now. I’ve developed plugins that make reversing easier and extended Binary Ninja’s architecture support to assist in playing the microcorruptio...
Even well-funded firms still too reactive with security, according to Deloitte
The overlapping infrastructure is a reminder of how malware support and distribution is frequently reused.
John Oliver may have written off 2016, but we’re darn proud of all that we accomplished and contributed this year. We released a slew of the security tools that help us -and you- work smarter, and promoted a few more that deserved recognition. We helped the New York City InfoSec community build a fo...
Popular open source framework gets a hardware bridge
National Cyber Security Centre director warns of marketing hype over APTs
We’re back with our promised second installment discussing control flow integrity. This time, we will talk about Microsoft’s implementation of control flow integrity. As a reminder, control flow integrity, or CFI, is an exploit mitigation technique that prevents bugs from turning into exploits. For...
Getting a handle on secrets management is one of the No. 1 challenges in modern IT security.
PKI can help three common scenarios that leave these critical pieces of infrastructure wide-open to hackers.
The Licking County government offices, including the police force, the county auditor's office and the clerk of courts, have lost online access and landline telephones.
68% of Americans were tricked by phishing emails that looked like they were from a coworker.
DigiCert Auto-Provisioning is aimed at IoT device manufacturers, for provisioning digital certificates at scale.
Data extraction firm has a large target on its back
The project comes amid concerns about Russian hacking within the Ukraine.
Some 500 million messages were sent in an hour
New document contains tips on certificates and encryption
Researcher found multiple flaws in voting system
Budget constraints, poor compatibility of systems and a lack of trained talent biggest barriers to advancing security postures