> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
While phishing emails grow more common, users can’t determine a fake from authentic message.
Attacks on enterprise IT networks that target information about critical infrastructure are on the rise, says Vectra.
Smart contracts can be compromised: they can have bugs, the owner’s wallet can be stolen, or they can be trapped due to an incorrect setting. If you develop a smart contract for your business, you must be prepared to react to events such as these. In many cases, the only available solution is to dep...
Attackers leverage breach data in Ongoing "Sextortion" Scam, says Barracuda Networks.
Symantec claims 56 US firms have been hit this year
Let’s automatically identify weird machines in software. Combating software exploitation has been a cat-and-mouse game ever since the Morris worm in 1988. Attackers use specific exploitation primitives to achieve unintended code execution. Major software vendors introduce exploit mitigation to break...
Train operator takes precautions following attempts to access accounts
Attackers not thought to be Kremlin-linked
For many high-assurance applications such as TLS traffic, medical databases, and blockchains, forward secrecy is absolutely essential. It is not sufficient to prevent an attacker from immediately decrypting sensitive information. Here the threat model encompasses situations where the adversary may d...
At MIT CSAIL’s Securing the Enterprise conference, BT Security president says risk is changing all the time.
Boards of directors need to think about cybersecurity as an existential crisis.
Slither is the first open-source static analysis framework for Solidity. Slither is fast and precise; it can find real vulnerabilities in a few seconds without user intervention. It is highly customizable and provides a set of APIs to inspect and analyze Solidity code easily. We use it in all of our...
Security experts share advice learned through their experience in dealing with the changing threat landscape.
Hackers were allegedly helped by IT security boss at French aerospace firm
Finding randomness on the blockchain is hard. A classic mistake developers make when trying to acquire a random value on-chain is to use quantities like future block hashes, block difficulty, or timestamps. The problem with these schemes is that they are vulnerable to manipulation by miners. For exa...
Lawyers claim airline owes customers compensation
Kaspersky Lab and Oxford University take their cue from Black Mirror
The Media Trust discovered the JuiceChecker-3PC malware campaign. There's not much hope for smartphone security, says Bruce Schneier.
The "2018 Cyber Balance Sheet" finds boardrooms are talking about cyber risk.
There is still serious risk but signs of improvement for election security, says the Center for Strategic & International Studies.