> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Chinese supply chain compromise claims wide of the mark
Car ownership database listed names registered to military unit 26165
Of the nearly 200 papers on software fuzzing that have been published in the last three years, most of them—even some from high-impact conferences—are academic clamor. Fuzzing research suffers from inconsistent and subjective benchmarks, which keeps this potent field in a state of arrested developme...
Legislation will ban factory default passwords on devices
OneDrive, LinkedIn and Office 365 logins are the most popular phishing lures, says Menlo Security.
We came away from ETH Berlin with two overarching impressions: first, many developers were hungry for any guidance on security, and second; too few security firms were accessible. When we began taking on blockchain security engagements in 2016, there were no tools engineered for the work. Useful doc...
Typo-squatting found on nearly 200 domains
Fast food restaurant customers were exposed for a year
We’re proud to announce the release of Winchecksec, a new open-source tool that detects security features in Windows binaries. Developed to satisfy our analysis and research needs, Winchecksec aims to surpass current open-source security feature detection tools in depth, accuracy, and performance wi...
Plan B meant physically travelling to targets, claims US indictment
Business email compromise getting easier for criminals, says Digital Shadows.
The DOD's sixth bug bounty program with HackerOne paid out more than $150K in bounties.
A WhiteHat Security report finds that businesses are not building security into app development lifecycle.
Companies in question dispute Bloomberg's story of China infiltrating supply chain.
DHS announces a pipeline cybersecurity initiative and awards $200K to Morphisec to protect financial infrastructure.
Advancements in the motoring industry need to be replicated in cybersecurity to provide a safer online future
The ‘Unsung Heroes’ of cybersecurity were acknowledged at an awards event in London last night
Terbium Labs argues that current reports on pricing are inconsistent and misleading
Group is responsible for raids against financial institutions, says FireEye
UK government goes on the offensive with overt attribution