> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
We have published an academic paper on Slither, our static analysis framework for smart contracts, in the International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB), colocated with ICSE. Our paper shows that Slither’s bug detection outperforms other static analysis too...
Pourquoi il faut arrêter de diffuser les failles génériques
Les annonces concernant des vulnérabilités très larges se multiplient, contribuant à embrouiller encore plus la situation des SI industriel et orientant vers des solutions non pertinentes. Faux problème, vraie confusion : pourquoi [...] Li...
Anonymous sources say employees used SnapLion to spy on users.
Downgrading Equifax's outlook is a warning in a language boards can understand.
The idea for Lyrebird came from observing that sometimes when someone forgets lock their workstation, someone else might mess with their computer. Since I wanted to learn more on how to program a webcam and take pictures - I figured why not create a little tool that takes a screenshot and uses the w...
Threat actors are using Emotet in malicious email campaigns on Canadian audiences, researchers say.
Lawyers warn enforcement activity will “step up”
An outline of the NCSC's approach to understanding the security of Software as a Service (SaaS) offerings.
Irdeto report reveals impact of customer data loss and attrition
US alleges publishing war docs harmed put informers and national security at risk
A delay in SSL certification update has been fixed after users received security alerts.
Nearly 30k variants of banking Trojans have been detected so far this year, says Kaspersky Lab.
Malicious actors target cryptocurrency users in Google Play.
Lack of strong DMARC policies put members at risk of phishing, says Red Sift
New report reveals thousands of victims were not informed
National Cyber Security Centre has also been sharing intelligence with NATO allies
A new RSA report says rogue mobile attacks are a growing phenomenon.
Mitsubishi Electric releases a patch for a vulnerability in the MELSEC-Q Series Ethernet Module.
Several of China's surveillance camera companies may be added to the US Entity List.
G Suite security blunder seems not to have led to improper access