> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape reveals several critical threats and vulnerabilities. Over 600,000 WordPress sites are at risk due to a newly discovered SQL injection vulnerability in the Backuply plugin. Additionally, a serious flaw in Cisco's Secure Email Gateway is actively being exploited, allowing attackers to gain root access and execute commands. The UK Legal Aid Agency hack has expanded in scope, with records dating back to 1978 compromised. New malware, including the Android RAT "Hirudo," is stealing banking credentials by replacing legitimate apps. Meanwhile, sophisticated spyware distribution methods via targeted ads raise concerns about zero-click exploits. Organizations are urged to patch vulnerabilities promptly as the cyber threat landscape evolves rapidly.
|
// AI-powered summary generated at 16:01
The Irish police force An Garda SĂochána has announced that it will set up specialist units to liaise with international partners on current and emerging threats, and to provide cyber and forensic tools to support front line policing and state security.
The fast-food chain has found a new malware variant and more compromised stores.
Using Vector35’s Binary Ninja, a promising new interactive static analysis and reverse engineering platform, I wrote a script that generated “exploits” for 2,000 unique binaries in this year’s DEFCON CTF qualifying round. If you’re wondering how to remain competitive in a post-DARPA DEFCON CTF, I hi...
72% of organizations are not confident in their ability to manage and control employee access to confidential documents and files.
Three-quarters of CSOs and network directors (74%) have been victims of DNS attacks, yet many have no DNS security beyond a firewall.
In the year since we started this bi-monthly meetup, we’ve been thrilled by the community that it has attracted. We’ve had some excellent presentations on pragmatic security research, shared our aspirations and annoyances with our work, and made some new friends. It’s a wonderful foundation for an e...
New research reveals rapid adoption of intelligent machines, but also highlights concerns over the security issues that they bring.
Symantec has announced plans to acquire Blue Coat Systems for a price of $4.65 billion.
Google’s Protocol Buffers (protobuf) is a common method of serializing data, typically found in distributed applications. Protobufs simplify the generally error-prone task of parsing binary data by letting a developer define the type of data, and letting a protobuf compiler (protoc) generate all the...
The exploit is for a Local Privilege Escalation (LPE) vulnerability in Windows that is key to the infection process and to APTs.
Significant percentages of consumers say that corporations are not taking enough responsibility when they get hacked.
Experts debate best way to best way to prepare for the inevitable
PA Consulting claims IT security teams must get leadership and staff onside
Dell SecureWorks claims advanced attack techniques require an agile response
The board is tasked with defining solutions to challenges in defining, detecting and defending critical information.
Legal experts urge organizations to prioritize compliance now
Hackers are manipulating age-old theft models and improving them for modern-day cybercrime, with the evolution of ransomware a key example.
15 million unencrypted telnet nodes out there offer shells to anyone who cares to peek in on the clear text password as it's being used.
The company was running on USC grants from the Department of Homeland Security, Defense Department and the US Army Research Office.
During Q1, Akamai mitigated more than 4,500 DDoS attacks, which is a 125% increase compared with Q1 2015.