> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Hackers compromised website and mobile ap
Ad blockers don't go far enough to protect against malvertising, finds The Media Trust
Most smart contracts have no verified source code, but people still trust them to protect their cryptocurrency. What’s more, several large custodial smart contracts have had security incidents. The security of contracts that exist on the blockchain should be independently ascertainable. Ethereum VM...
State of the SOAR Report finds SOCs only respond to 12,000 alerts per week
The company will offer rewards of up to $10,000
A popular trend in smart contract design is to promote the development of upgradable contracts. At Trail of Bits, we have reviewed many upgradable contracts and believe that this trend is going in the wrong direction. Existing techniques to upgrade contracts have flaws, increase the complexity of th...
Marketing company did not seek recipient consent
One member suspected of being current or former security bod
Access Control Lists (ACLs) are an integral part of the Microsoft Windows security model. In addition to controlling access to secured resources, they are also used in sandboxing, event auditing, and specifying mandatory integrity levels. They are also exceedingly painful to programmatically manipul...
Alleges that company misled over its preparedness
Hackers received a historically high payout at H1-702 2018.
An increasing number of organizations and companies (including the federal government) rely on open-source projects in their security operations architecture, secure development tools, and beyond. Open-source solutions offer numerous advantages to development-savvy teams ready to take ownership of t...
A new survey finds that security teams are not consulted on IoT projects nearly 62% of the time.
NIST launches a new privacy framework to give organizations strategies to mitigate privacy risks.
Report reveals how cyber-criminals are increasingly targeting the humans within businesses
Nineteen-year-old also grounded United Airlines flight
Bitdefender report claims many don’t patch firmware
Get Safe Online warns of 58% surge since 2017
Opsview and Core Security worked together on a timeline to release fixes and publish an advisory.
A class action lawsuit alleges foul play in preserving key evidence of data breach.