> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. Google is rolling out AI defenses for Android to combat messaging scams and fraudulent calls, aiming to enhance user security.
2. A new election influence campaign is leveraging hyperlocal content to manipulate AI chatbots, suggesting a future trend in political disinformation.
3. Zero-click spyware is being disseminated through targeted online ads, posing significant risks as it can infect devices without user interaction.
4. Cisco has issued a warning regarding an actively exploited vulnerability in its Secure Email Gateway, allowing remote attackers to execute commands with root privileges.
5. The Legal Aid Agency in the UK experienced a severe data breach, with records dating back to 1978 compromised, highlighting the long-term implications of such attacks.
6. Researchers also discovered fake CAPTCHA systems used to facilitate malware downloads, further illustrating the evolving tactics of cybercriminals.
7. Major vulnerabilities were reported in various platforms, including critical flaws in Palo Alto Networks' PAN-OS and Drupal, underscoring the urgent need for patches and updates.
|
// AI-powered summary generated at 20:01
New research from the BCI has revealed substantial differences among organizations when it comes to response times following a cyber-breach
But it will be business-as-usual in Beijing
tl;dr – Tidas is now open source. Let us know if your company wants help trying it out. When Apple quietly released the Secure Enclave Crypto API in iOS 9 (kSecAttrTokenIDSecureEnclave), it allowed developers to liberate their users from the annoyance of strong passwords or OAuth. That is, if the de...
Database used by banks and governments found on public internet
99% of post-intrusion cyberattack activities use standard networking and IT tools.
Gloves Goggles Checkered body suits The representation of hackers in stock media spans a narrow band of reality between the laughable and the absurd. It overshadows the fact that lots of hackers are security professionals. They may dress differently, but they serve a critical function in the economy...
User names, passwords, addresses and phone numbers are being transferred over an insecure internet connection.
The plaintext 2GB database has names, addresses, emails, phone numbers, dates of birth and Social Security Numbers (SSNs).
Il y a deux ans un collègue allemand me recommandait l’ouvrage Black Out de Mark Elsberg, à l’époque disponible uniquement en Allemand. Je l’avais acheté en audio book pour pratiquer mon allemand dans le TGV, ce qui était très optimiste [...] Lire la suite
Swift hackers are at it again
New research reveals lapses in data deletion best practice
Using Vector35’s Binary Ninja, a promising new interactive static analysis and reverse engineering platform, I wrote a script that generated “exploits” for 2,000 unique binaries in this year’s DEFCON CTF qualifying round. If you’re wondering how to remain competitive in a post-DARPA DEFCON CTF, I hi...
Internet of Things hijacked for attack on small biz
Security firm had not yet completed its investigation
Cerber is spread through phishing and, like other ransomware, encrypts users’ files. It demands about $500 in payment.
Insiders claim chip giant may be looking to refocus
Malware rendered key track data unusable
The company said that it has blocked more than 100 million ransomware threats for their customers in the last six months alone.
Security vendor play down seriousness of vulnerabilities
The thieves could book flights or use the miles as a form of online currency.