> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape reveals several critical threats and vulnerabilities. Over 600,000 WordPress sites are at risk due to a newly discovered SQL injection vulnerability in the Backuply plugin. Additionally, a serious flaw in Cisco's Secure Email Gateway is actively being exploited, allowing attackers to gain root access and execute commands. The UK Legal Aid Agency hack has expanded in scope, with records dating back to 1978 compromised. New malware, including the Android RAT "Hirudo," is stealing banking credentials by replacing legitimate apps. Meanwhile, sophisticated spyware distribution methods via targeted ads raise concerns about zero-click exploits. Organizations are urged to patch vulnerabilities promptly as the cyber threat landscape evolves rapidly.
|
// AI-powered summary generated at 16:01
The insecure Wi-Fi mechanism allows hackers to disable the anti-theft alarm, flash the lights, tweak charging settings and drain the battery.
Russian Facebook denies breach
Using Vector35’s Binary Ninja, a promising new interactive static analysis and reverse engineering platform, I wrote a script that generated “exploits” for 2,000 unique binaries in this year’s DEFCON CTF qualifying round. If you’re wondering how to remain competitive in a post-DARPA DEFCON CTF, I hi...
Nine in ten Brits are against the mass surveillance powers contained in the Investigatory Powers Bill.
The malware targets specific processes within simulated Siemens control system environments.
In the year since we started this bi-monthly meetup, we’ve been thrilled by the community that it has attracted. We’ve had some excellent presentations on pragmatic security research, shared our aspirations and annoyances with our work, and made some new friends. It’s a wonderful foundation for an e...
Ransomware family continues to evolve with version 3.1
Cybercriminals recognize that holding the data hostage is more lucrative than simply stealing the data and selling it on the black market.
Google’s Protocol Buffers (protobuf) is a common method of serializing data, typically found in distributed applications. Protobufs simplify the generally error-prone task of parsing binary data by letting a developer define the type of data, and letting a protobuf compiler (protoc) generate all the...
The US central bank is a high-value target that should be well-guarded; but an internal audit showed critical vulnerabilities in its systems.
The connected nature of these products creates unintentional ports to other sensitive and critical systems, data and devices.
If you follow the recommendations in the 2016 Verizon Data Breach Investigations Report (DBIR), you will expose your organization to more risk, not less. The report’s most glaring flaw is the assertion that the TLS FREAK vulnerability is among the ‘Top 10’ most exploited on the Internet. No experien...
Apple has yet to release a patch
Egress FoI request shows healthcare is once again the worst offender
Bad guys use operational security to avoid detection and retain attack infrastructure; good guys use it to deny adversaries critical information.
Deal should not be ratified in current form, says Buttarelli
Anomali research finds widespread reuse of corporate credentials
First major casualty of new breed of email scam
Info can be purchased on criminal forums.
Could there be a link between this and LinkedIn, MySpace breaches?