> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Cyber-resilience exercise was held on Friday
A coinminer goes undetected by using Windows Installer as an evasion technique, says Trend Micro.
Guidance for risk assessors, and developers of applications which will be run on devices handling OFFICIAL data.
The NCCIC issued a CERT alert warning of vulnerabilities in the JBoss application server.
With thousands of vulnerabilities reported each week, NIST will rely on AI to help with scoring.
Building and using cryptographic libraries is notoriously difficult. Even when each component of the system has been implemented correctly (quite difficult to do), improperly combining these pieces can lead to disastrous results. Cryptography, when rolled right, forms the bedrock of any secure appli...
Kaspersky Lab reveals tried-and-tested alongside new scam tactics
Utah man carried out attacks in 2013 and 2014
Smart contracts can be compromised: they can have bugs, the owner’s wallet can be stolen, or they can be trapped due to an incorrect setting. If you develop a smart contract for your business, you must be prepared to react to events such as these. In many cases, the only available solution is to dep...
Incident causes major disruption at St Francis Xavier
Symantec uncovers Trojan.Fastcash malware used by N. Korean hacker group in ATM attacks
Let’s automatically identify weird machines in software. Combating software exploitation has been a cat-and-mouse game ever since the Morris worm in 1988. Attackers use specific exploitation primitives to achieve unintended code execution. Major software vendors introduce exploit mitigation to break...
Survey finds gaps in protections against phishing threats
With more than 3.6 billion records exposed thus far, 2018 not expected to reach breach levels of 2017, says Risk Based Security
For many high-assurance applications such as TLS traffic, medical databases, and blockchains, forward secrecy is absolutely essential. It is not sufficient to prevent an attacker from immediately decrypting sensitive information. Here the threat model encompasses situations where the adversary may d...
Researchers warn of many more exposed devices out there
Oracle, Experian and Equifax are among companies in the cross hairs
Central bank rejects mass hacking reports
Design flaw in WooCommerce plugin can lead to remote code execution, said RIPS Technologies
In the quest for higher salaries, nearly half of IT professionals in Europe plan to leave current post in 2019, according to Spiceworks