> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
The mayor of San Antonio welcomes attendees to the 2018 NICE K12 Cybersecurity Education Conference.
Figures based on FOI findings from a third of police forces
Earlier this year, the Web3 Foundation (W3F) commissioned Trail of Bits for a security review and assessment of the risks in storing cryptocurrency. Everyone who owns cryptocurrency — from large institutions to individual enthusiasts — shares the W3F’s concerns. In service to the broader community,...
US court says products will remain off-limits to federal government
US site formerly known as Viyet was affected
Remember last December’s Empire Hacking? The one where we dedicated the event to sharing the best information about blockchain and smart contract security? Let’s do that again, and let’s make it a tradition; a half-day mini conference focused exclusively on a single topic every December. On December...
Hotel chain Marriott suffers data breach with the sensitive details of 500 million customers possibly at risk
A study finds IT security teams underestimating value of critical assets.
We wanted to make up for missing the first three Devcons, so we participated in this year’s event through a number of talks, a panel, and two trainings. For those of you who couldn’t join us, we’ve summarized our contributions below. We hope to see you there next year. Using Manticore and Symbolic E...
Holiday gift card spear phishing attack targets office managers.
Over 100,000 officers will gain access to Cisco Network Academy
S’il est nécessaire d’avoir recours aux patchs de sécurité pour protéger vos composants industriels, ils peuvent s’avérer contre productif en amenant à se focaliser sur les vulnérabilités d’un système plutôt que sur des solutions de protection globale. Alors, patch ou [...] Lire la suite
Vulnerabilities enable hacking camera feeds and other restricted functions.
UK intelligence service stresses default position is to disclose
Employee risk and third-party visibility continues to be a challenge
Credential-stuffing attack targets rewards points from DD Perks account holders.
Researchers discover a new family of injections dubbed EternalSilence.
Since its release in 2017, Headless Chrome has grown popular among DevOps and attackers.
Three years of attacks caused $30m in losses for hospitals, cities and others
Personal info was left publicly accessible for at least two weeks