> TODAY'S SUMMARY (67 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are actively exploiting a zero-day vulnerability in Palo Alto Networks' PAN-OS, leading to root access and prompting emergency patches from CISA. Ransomware tactics are evolving, as criminals increasingly target employees' families and leverage AI for more sophisticated attacks. The FTC has accused a firm of preying on sextortion victims, while Microsoft has disrupted a massive phishing network responsible for over a billion scam messages. Additionally, vulnerabilities in widely used tools like Cisco's email gateway and LiteLLM pose significant risks, underscoring the importance of timely patching and vigilance in threat detection.
|
// AI-powered summary generated at 12:01
Vendor Security Assessment Questionnaire should help firms and their suppliers
Uncommonly wired sea-pirates hacked bills of lading for future shipments and vessel routes to plot out their attacks ahead of time.
Earlier today, a federal judge ordered Apple to comply with the FBI’s request for technical assistance in the recovery of the San Bernadino gunmen’s iPhone 5C. Since then, many have argued whether these requests from the FBI are technically feasible given the support for strong encryption on iOS dev...
The multi-vector campaign drops a remote access trojan (RAT) with data exfiltration, screen capture and keylogging capabilities.
Names, email addresses, phone numbers and phishing-ready info on employees has turned up on a Dark Web marketplace.
For most mobile app developers, password management has as much appeal as a visit to the dentist. You do it because you have to, but it is annoying and easy to screw up, even when using standard libraries or protocols like OAUTH. Your users feel the same way. Even if they know to use strong […]
Palo Alto Networks has unearthed a new piece of ransomware that is specifically targeting the OS X platform.
Sources say hackers have already used stolen wage information and Social Security numbers to file fraudulent federal and state tax returns.
We’re excited to announce that Sophia D’Antoine will be the next featured speaker at Etsy’s Code as Craft series on Wednesday, February 10th from 6:30-8pm in NYC. What is Code as Craft? Etsy Code as Craft events are a semi-monthly series of guest speakers who explore a technical topic or computing t...
In a PoC unveiled at RSA, Skycure married mobile clickjacking and accessibility permissions for an insidious new attack vector.
Golem can control devices remotely and automatically launch and run applications without a user’s consent.
Every good security researcher has a well-curated list of blogs they subscribe to. At Trail of Bits, given our interest in software security and its intersections with programming languages, one of our favorites is The Programming Language Enthusiast by Michael Hicks. Our primary activity is to desc...
BT has announced further partnerships with CA Technologies and Palo Alto Networks to offer cloud identity service and security.
Survey finds 88% of security professionals think access would have a negative impact on consumer and enterprise security and privacy
HEAT study also finds mobile management tools eschewed by many
Likely motivated by geopolitical events, Turkish victims at the end of the year skyrocketed ten-fold to more than 30,000 events per day.
IoD report reveals worrying lack of cyber preparedness
Time for IT admins to improve password management
Findikoglu faces over 57 years in the slammer
“There are natural disincentives for companies to share"