> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Backdoor flaw in NoScript browser extension reportedly easy to reproduce
Report finds room for improvement in disaster recovery plans
Today, we’re going to talk about a hard problem that we are working on as part of DARPA’s Cyber Fault-Tolerant Attack Recovery (CFAR) program: automatically protecting software from 0-day exploits, memory corruption, and many currently undiscovered bugs. You might be thinking: “Why bother? Can’t I j...
August saw a surge in Ramnit banking trojan, says Check Point
Security giant moves to allay concerns over apps
Most smart contracts have no verified source code, but people still trust them to protect their cryptocurrency. What’s more, several large custodial smart contracts have had security incidents. The security of contracts that exist on the blockchain should be independently ascertainable. Ethereum VM...
Moscow man is alleged to have helped steal data on over 100m customers
RiskIQ claims notorious Magecart group to blame
A popular trend in smart contract design is to promote the development of upgradable contracts. At Trail of Bits, we have reviewed many upgradable contracts and believe that this trend is going in the wrong direction. Existing techniques to upgrade contracts have flaws, increase the complexity of th...
Long time associates of GOP operative, Robert Stone, questioned as part of Mueller probe.
Multiple incidents of misuse of customer and employee data spans six years
Access Control Lists (ACLs) are an integral part of the Microsoft Windows security model. In addition to controlling access to secured resources, they are also used in sandboxing, event auditing, and specifying mandatory integrity levels. They are also exceedingly painful to programmatically manipul...
Saga launches personal cybercrime coverage
Embrace hacker culture, tools and techniques in the battle with cyber-criminals
An increasing number of organizations and companies (including the federal government) rely on open-source projects in their security operations architecture, secure development tools, and beyond. Open-source solutions offer numerous advantages to development-savvy teams ready to take ownership of t...
The three key questions that can lead security professionals from feeling overwhelmed to success
Mac App Store app was exfiltrating data to China
Major two-year study claims e-systems are too vulnerable
Bouxtie founder faces jail
Africa, Asia and Latin America most targeted for ICS computer attacks, finds Kaspersky Lab