> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Norton investigation warns of third-party access to personal data
ISC West keynote speaker says DHS needs to make collaboration more attractive to industry.
Exciting news: We’re hosting the second annual QueryCon on June 20th-21st in New York City, co-sponsored by Kolide and Carbon Black! Register here QueryCon has become the foremost event for the osquery and osql open-source community. QueryCon brings together core maintainers, developers, and end-use...
Apply defense in depth to surveillance cameras and IoT devices.
Experts talk about the process of convergence at #ISCWest2019.
Fuzzing is a great way to find bugs in software, but many developers don’t use it. We hope to change that today with the release of Sienna Locomotive, a new open-source fuzzer for Windows that emphasizes usability. Sienna Locomotive aims to make fuzzing accessible to developers with limited security...
Verizon also commits to doubling security spend at ailing web firm
Latest update round sees patches for over 70 vulnerabilities
For my winternship and springternship at Trail of Bits, I researched novel techniques for symbolic execution on cryptographic protocols. I analyzed various implementation-level bugs in cryptographic libraries, and built a prototype Manticore-based concolic unit testing tool, Sandshrew, that analyzed...
Essex cyber-criminal was part of Russian Angler EK gang
The Baldr stealer malware incorporates three threat actors, says researchers.
It is time for the second installment of our efforts to reproduce original fuzzing research on modern systems. If you haven’t yet, please read the first part. This time we tackle fuzzing on Windows by reproducing the results of “An Empirical Study of the Robustness of Windows NT Applications Using R...
Cyber-criminals are using digital doppelgangers traded in dark web marketplaces to avoid detection.
A researcher discovers three vulnerabilities in Verizon's home router.
TLS 1.3 represents the culmination of over two decades of experience in deploying large-scale transport security. For the most part it simplifies and improves the security of TLS and can act as a drop-in replacement for TLS 1.2. However, one new feature in the protocol represents a significant secur...
European Data Protection Supervisor follows up on Dutch investigation
Hoya saw output drop 40% after malware hit factories
Compensation claimants have personal details exposed
Penetration testers intercept CT scans, and inject or remove cancerous nodes on scans.
Attackers impersonate tax services and payroll companies ahead of US tax filing deadline.