> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Lender hopes to blaze a trail as authorized push payment scams increase
Reports suggest data was sold on dark web
Exciting news: We’re hosting the second annual QueryCon on June 20th-21st in New York City, co-sponsored by Kolide and Carbon Black! Register here QueryCon has become the foremost event for the osquery and osql open-source community. QueryCon brings together core maintainers, developers, and end-use...
The Belgian Centre for Cybersecurity won't issue "a negative opinion" on Huawei following several months of investigation.
Kaspersky Labs believes it was an attempt to gain full control over a targeted device.
Fuzzing is a great way to find bugs in software, but many developers don’t use it. We hope to change that today with the release of Sienna Locomotive, a new open-source fuzzer for Windows that emphasizes usability. Sienna Locomotive aims to make fuzzing accessible to developers with limited security...
Sophos has been looking into reports of boot-up failures.
UK firm Bounty lucky to escape with pre-GDPR penalty
For my winternship and springternship at Trail of Bits, I researched novel techniques for symbolic execution on cryptographic protocols. I analyzed various implementation-level bugs in cryptographic libraries, and built a prototype Manticore-based concolic unit testing tool, Sandshrew, that analyzed...
Direct messages are spammed out from hijacked accounts
Near-misses with aircraft in UK airspace up a third
It is time for the second installment of our efforts to reproduce original fuzzing research on modern systems. If you haven’t yet, please read the first part. This time we tackle fuzzing on Windows by reproducing the results of “An Empirical Study of the Robustness of Windows NT Applications Using R...
Researchers discover attackers spoofing Microsoft, Barracuda Networks to steal credentials.
Hackers exploit a vulnerability in the Yuzo Related Post plugin for WordPress sites.
A security researcher alerted Matrix to vulnerabilities in an outdated version of Jenkins.
Proposed law could enable major censorship crackdown
Every force now has its own cyber specialists
Home Office can’t get the hang of bcc
The ISC West keynote address from Russ Butler talks about security at Levi's Stadium and the future of stadium security.
An ISC West panel asks, "Where are we in realizing the promise of AI?"