> TODAY'S SUMMARY (5 articles)
Today's cyber news highlights significant developments in the ongoing battle against cybercrime and privacy issues. Microsoft has successfully dismantled a large criminal marketplace responsible for distributing over 1 billion phishing messages, showcasing the escalating threat of phishing-as-a-service. Meanwhile, Flock's CEO continues to advocate for surveillance technology despite mounting public concern over privacy implications, emphasizing its potential crime-fighting advantages. In product updates, Sophos has enhanced its ITDR capabilities to improve identity protection in an AI-driven landscape, focusing on Microsoft integration and quicker response times. These trends underline the dual challenges of combating cyber threats while navigating privacy and ethical considerations in technology deployment.
|
// AI-powered summary generated at 04:00
Attackers may have been slurping sensitive bug data for even longer
Researchers’ public disclosure puts security giants on alert
Une vulnérabilité a été découverte dans Apple Mac OS X. Elle permet à un attaquant de provoquer une élévation de privilèges.
Dell SecureWorks claims stolen credentials and VPNs are becoming increasingly popular
The app targets users by silently taking photos of them as they use the app.
At REcon 2015, I demonstrated a new hardware side channel which targets co-located virtual machines in the cloud. This attack exploits the CPU’s pipeline as opposed to cache tiers which are often used in side channel attacks. When designing or looking for hardware based side channels – specifically...
This particular threat is very dangerous as the attacker will have total control over the affected machine.
The vulnerability can be used to deliver content or harmful files that enable a wide range of attacks.
Phones from Huawei, Lenovo and Xiaomi have pre-installed spyware—even as Android is on track to hit 2 million new malware apps this year.
Critical vulnerabilities in three popular baby monitors, and a slew of other problems in others, allow hackers to spy on the household.
Singtel will provide threat intelligence from its Asia Pacific network for TrustWave’s managed security services.
Affected employees still haven’t been informed
Attacks could run the gamut from arbitrary file injection to man-in-the-middle attacks to cross-site request forgery (CSRF).
The move indicates that broadband providers may be finally taking cybersecurity for their end users more seriously.
In contrast, some TLDs, like .zip, are used for the sole purpose of playing host to a large number of scams and spam.
OPM, Anthem, Ashley Madison et al provide treasure trove of intelligence
KPMG study claims industry weaknesses are a national security risk
KeyRaider appears to be behind the largest known Apple account theft caused by malware to date.
Hackers have set up a fake domain for the Electronic Frontier Foundation as part of a targeted malware campaign.
Six males, aged between 15 and 18, arrested by NCA