> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Security researcher analyzed content of phishing email used in ICS attacks
New York man apparently targeted Silicon Valley bigwigs
Remember last December’s Empire Hacking? The one where we dedicated the event to sharing the best information about blockchain and smart contract security? Let’s do that again, and let’s make it a tradition; a half-day mini conference focused exclusively on a single topic every December. On December...
LastPass claims only Amazon offers customers more secure log-ins
We wanted to make up for missing the first three Devcons, so we participated in this year’s event through a number of talks, a panel, and two trainings. For those of you who couldn’t join us, we’ve summarized our contributions below. We hope to see you there next year. Using Manticore and Symbolic E...
Has spam email been defeated, or should we admit we cannot beat it?
Old vulnerabilities persist, because of how vulnerability management and full stack visibility is done
S’il est nécessaire d’avoir recours aux patchs de sécurité pour protéger vos composants industriels, ils peuvent s’avérer contre productif en amenant à se focaliser sur les vulnérabilités d’un système plutôt que sur des solutions de protection globale. Alors, patch ou [...] Lire la suite
Irisscon opens with a look back at the last 10 years of the Irish CERT, and a call for better government involvement
Sectigo research finds just a third have chosen most secure certs
Guidance for risk assessors, and developers of applications which will be run on devices handling OFFICIAL data.
Error meant anyone with an account could view others’ details
Firm under fire for phishy looking email
Building and using cryptographic libraries is notoriously difficult. Even when each component of the system has been implemented correctly (quite difficult to do), improperly combining these pieces can lead to disastrous results. Cryptography, when rolled right, forms the bedrock of any secure appli...
Mirai was detected attacking non-IoT, targeting unpatched Linux servers.
As users become more aware of threats, phishing campaigns are growing more sophisticated, says Zscaler.
A security researcher uses Twitter to warn users about 13 malicious Android apps.
One group attempts to sabotage skimming operation of the other
Juniper Research warns of rising synthetic ID fraud