> TODAY'S SUMMARY (67 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are actively exploiting a zero-day vulnerability in Palo Alto Networks' PAN-OS, leading to root access and prompting emergency patches from CISA. Ransomware tactics are evolving, as criminals increasingly target employees' families and leverage AI for more sophisticated attacks. The FTC has accused a firm of preying on sextortion victims, while Microsoft has disrupted a massive phishing network responsible for over a billion scam messages. Additionally, vulnerabilities in widely used tools like Cisco's email gateway and LiteLLM pose significant risks, underscoring the importance of timely patching and vigilance in threat detection.
|
// AI-powered summary generated at 12:01
Facebook users targeted in spate of malicious ‘Security System Pages’
Core Security releases details of four vulnerabilities
At the end of last year, we had some free time to explore new and interesting uses of the automated bug-finding technology we developed for the DARPA Cyber Grand Challenge. While the rest of the competitors are quietly preparing for the CGC Final Event, we can entertain you with tales of running our...
Early stage program will help grow a £17 billion industry
Six hard drives have gone missing
Now that the new year is upon us, we can look back and take assessment of 2015. The past year saw Trail of Bits continuing our prior work, such as automated vulnerability discovery and remediation, and branching out into new areas, like secure self-hosted video chat. We also increased our community...
New partnership sees Glasswall combine its unique security approach with ZeroDayLab 's holistic methods
Cyber-criminals are increasingly targeting businesses, with recent ransom demands shifting from opportunistic extortion to market-based.
We’re excited to announce our financial support for Let’s Encrypt, the open, automated and free SSL Certificate Authority (CA) that went into public beta on December 3. With so much room for improvement in the CA space, Let’s Encrypt offers a refreshing, promising vision of encrypting the web. Expen...
Foursys urges firms to make themselves an ‘ugly target’
Tibetan and Uyghur activists targeted in multi-year campaign
Today, we’re releasing the source code to our self-hosted video chat platform, Tuber Time Communications (or just “Tuber”). We’ve been using Tuber for private video calls with up to 15 members of our team over the last year or two. We want you to use it, protect your privacy, and help us make it bet...
Hacktivists Anonymous take down Japanese Airport website with DDoS attack
Exports by Israeli cybersecurity companies have reached more than $6 billion, equating to approximately 10% of the global cybersecurity market.
Via a phishing scam, hackers were able to access payroll records and W-2s for years 2013 and 2014, and direct-deposit banking info.
Accounts department hit by scammers
The vulnerability opens up iPhone users to a raft of problems, including allowing an attacker to impersonate a victim’s identity on a chosen site.
The new malware strain is unique and shows dedicated R&D efforts on the part of criminals.
In 2015 alone, the amount of Android malware infections totaled more than 9.5 million.
The fake Facebook messages deliver Nivdort, a trojan that interferes with internet connections and allows the installation of ransomware.