> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Fund-raising super PAC spills details on half a million voters
Slither is the first open-source static analysis framework for Solidity. Slither is fast and precise; it can find real vulnerabilities in a few seconds without user intervention. It is highly customizable and provides a set of APIs to inspect and analyze Solidity code easily. We use it in all of our...
Under-reporting may be seriously skewing ONS results
Operation Oceansalt could be false flag attempt, says McAfee
Finding randomness on the blockchain is hard. A classic mistake developers make when trying to acquire a random value on-chain is to use quantities like future block hashes, block difficulty, or timestamps. The problem with these schemes is that they are vulnerable to manipulation by miners. For exa...
GreyEnergy targets the energy sector with a malware framework similar to that of BlackEnergy, says ESET.
A survey suggests that consumers forgive brands but want GDPR-like rules in the US.
Certaines solutions de sécurité développées pour l’IT peuvent être utilisées pour l’OT (Operational Technology), mais à condition d’être adaptées. Au vu des derniers événements, en particulier le hack hardware « Supermicro », on peut se demander si l’inverse ne serait pas une [...] Lire la suite
Poll finds Americans are concerned about election security, and Zscaler says SEO is poisoning midterm elections.
Awareness raising exercise is part of European Cyber Security Month
Of the nearly 200 papers on software fuzzing that have been published in the last three years, most of them—even some from high-impact conferences—are academic clamor. Fuzzing research suffers from inconsistent and subjective benchmarks, which keeps this potent field in a state of arrested developme...
Atlanta man worked on breach portal
ISPA calls for simplified reporting and regulatory environment
We came away from ETH Berlin with two overarching impressions: first, many developers were hungry for any guidance on security, and second; too few security firms were accessible. When we began taking on blockchain security engagements in 2016, there were no tools engineered for the work. Useful doc...
A researcher was able to download the entire database of Donald Dater app users.
North Carolina-based Onslow Water and Sewer Authority (ONWASA) suffers ransomware attack while recovering from hurricane damage.
Creating a cyber-secure culture requires an "all hands on deck" approach that is well funded.
New (ISC)² methodology reveals huge shortfall today
GCHQ body says Active Cyber Defence strategy is working
Possible state insiders supplying dark web with info