> TODAY'S SUMMARY (67 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are actively exploiting a zero-day vulnerability in Palo Alto Networks' PAN-OS, leading to root access and prompting emergency patches from CISA. Ransomware tactics are evolving, as criminals increasingly target employees' families and leverage AI for more sophisticated attacks. The FTC has accused a firm of preying on sextortion victims, while Microsoft has disrupted a massive phishing network responsible for over a billion scam messages. Additionally, vulnerabilities in widely used tools like Cisco's email gateway and LiteLLM pose significant risks, underscoring the importance of timely patching and vigilance in threat detection.
|
// AI-powered summary generated at 12:01
The British government has been hacking into Israeli military jets and drones for 18 years after bypassing their security.
They obtained full control of the pan-tilt-zoom controls and could redirect the video feed and movement alerts.
Every good security researcher has a well-curated list of blogs they subscribe to. At Trail of Bits, given our interest in software security and its intersections with programming languages, one of our favorites is The Programming Language Enthusiast by Michael Hicks. Our primary activity is to desc...
The European Commission and the United States have agreed on a new framework to replace Safe Harbor, the EU-US Privacy Shield.
FireEye has acquired Invotas, where the Security Orchestrator technologies will unify cyber-attack detection results, threat intelligence and incident response elements of an organization’s security program into a single console.
At the end of last year, we had some free time to explore new and interesting uses of the automated bug-finding technology we developed for the DARPA Cyber Grand Challenge. While the rest of the competitors are quietly preparing for the CGC Final Event, we can entertain you with tales of running our...
Five years’ probation for RAT mastermind who co-operated with FBI
National Cybersecurity Protection System failing on multiple counts
Now that the new year is upon us, we can look back and take assessment of 2015. The past year saw Trail of Bits continuing our prior work, such as automated vulnerability discovery and remediation, and branching out into new areas, like secure self-hosted video chat. We also increased our community...
Industry nervous as agreement on data transfers still pending
Payment card data breaches at its venues, during three periods between May 2014 and last December, were due to PoS malware.
We’re excited to announce our financial support for Let’s Encrypt, the open, automated and free SSL Certificate Authority (CA) that went into public beta on December 3. With so much room for improvement in the CA space, Let’s Encrypt offers a refreshing, promising vision of encrypting the web. Expen...
New campaigns are using malicious Microsoft Word documents and spear phishing emails to spread malware.
The risk of malware infection grew by 17% in December, as the number of active malware families increased by 25%.
Californian ‘dark intelligence’ biz said to be struggling
Staff forced to return to pen and paper
Salaries for IT security roles to increase in response to cyber-crime threats.
Voice fraud prevention and authentication gains Google support in a $75 million Series C funding round for Pindrop.
There was a rapid growth of 236% in viruses and worms between the third and fourth quarter of 2015.
Access to key online banking systems still not 100%