> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Redacted findings point to basic mistakes
Experts caution it doesn’t go far enough
Finding randomness on the blockchain is hard. A classic mistake developers make when trying to acquire a random value on-chain is to use quantities like future block hashes, block difficulty, or timestamps. The problem with these schemes is that they are vulnerable to manipulation by miners. For exa...
Endpoint compromises up 20% from last year, finds Ponemon survey.
The need to understand what certification is most suited for a person
Certaines solutions de sécurité développées pour l’IT peuvent être utilisées pour l’OT (Operational Technology), mais à condition d’être adaptées. Au vu des derniers événements, en particulier le hack hardware « Supermicro », on peut se demander si l’inverse ne serait pas une [...] Lire la suite
Malicious program for Windows gives attackers remote access, says Kaspersky Lab.
Coinhive attacks Apple iPhone and Safari browser, says Check Point
Of the nearly 200 papers on software fuzzing that have been published in the last three years, most of them—even some from high-impact conferences—are academic clamor. Fuzzing research suffers from inconsistent and subjective benchmarks, which keeps this potent field in a state of arrested developme...
Cyber-criminals breathe new life into old tactics and techniques, says Malwarebytes.
New employees discuss how to get ahead in getting a first job in cyber
We came away from ETH Berlin with two overarching impressions: first, many developers were hungry for any guidance on security, and second; too few security firms were accessible. When we began taking on blockchain security engagements in 2016, there were no tools engineered for the work. Useful doc...
Financial and personal information may have been exposed by contractor
Ransomware costs hit home for under-funded health service
We’re proud to announce the release of Winchecksec, a new open-source tool that detects security features in Windows binaries. Developed to satisfy our analysis and research needs, Winchecksec aims to surpass current open-source security feature detection tools in depth, accuracy, and performance wi...
Some 14m had virtually all their profile info scraped
One Amazon data center revealed by WikiLeaks runs under the name Vandalay Industries
New iteration of Magecart malware obfuscates data collection, says The Media Trust.
Q2 2018 saw 1.6m attacks on gaming and gambling sector, according to the ThreatMetrix cybercrime report.
Banking association suggests levy to help compensate victims