> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Students blamed for many attacks
Phishing attacks remain successful by leveraging macros.
Today, we’re going to talk about a hard problem that we are working on as part of DARPA’s Cyber Fault-Tolerant Attack Recovery (CFAR) program: automatically protecting software from 0-day exploits, memory corruption, and many currently undiscovered bugs. You might be thinking: “Why bother? Can’t I j...
Lawmakers are critical of the State Department for failure to meet basic cybersecurity standards.
A new survey finds nearly all attacks automatically executed are against outdated code.
Most smart contracts have no verified source code, but people still trust them to protect their cryptocurrency. What’s more, several large custodial smart contracts have had security incidents. The security of contracts that exist on the blockchain should be independently ascertainable. Ethereum VM...
Let’s change the way we talk about security, as global news and incidents are creating new threats
Malicious script injected into supplier’s JavaScript library
A popular trend in smart contract design is to promote the development of upgradable contracts. At Trail of Bits, we have reviewed many upgradable contracts and believe that this trend is going in the wrong direction. Existing techniques to upgrade contracts have flaws, increase the complexity of th...
UK regulator receives 500 calls a week as firms play it safe
Simply buying in expertise will not help boards manage risk, says Martin
The keys to a successful insider threat program are people, process and technology.
A new acquisition aims to enhance security with BeyondTrust’s privileged access management platform.
Lack of independent oversight means old regime breaks the law
Leak makes 445 million records publicly available for days
Main website still out of action
Nexusguard's "Q2 2018 Threat Report" finds DDoS attacks quintupled in size to 26Gbps.
Industry leaders share their creative approaches to narrowing the skills gap
Panelists at Spotlight18 talk about indicators of success and failure in a modern SOC
From traditional SOCs to cyber defense centers