> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Soccer-fan spammers target Cardi B’s website with fake videos, links, and photos.
Support for third-party authentication and response to Russian activity announced
Access Control Lists (ACLs) are an integral part of the Microsoft Windows security model. In addition to controlling access to secured resources, they are also used in sandboxing, event auditing, and specifying mandatory integrity levels. They are also exceedingly painful to programmatically manipul...
Security milestone but still a long way to go
Trend Micro blocked over 20 billion threats in the first six months of 2018
An increasing number of organizations and companies (including the federal government) rely on open-source projects in their security operations architecture, secure development tools, and beyond. Open-source solutions offer numerous advantages to development-savvy teams ready to take ownership of t...
A DDoS attack on Banco de Espana began on Sunday and lasted through Tuesday.
CERT alerts on vulnerabilities in Ghostscript software and Windows task manager allow hackers to gain elevated system privileges.
This spring and summer, as an intern at Trail of Bits, I researched modeling fault attacks on RSA signatures. I looked at an optimization of RSA signing that uses the Chinese Remainder Theorem (CRT) and induced calculation faults that reveal private keys. I analyzed fault attacks at a low level rath...
One of 17 countries to miss the NIS Directive deadline, Poland's National Cybersecurity System Act is now in effect
GDPR thought to be a key factor
Mimecast spots 41,000 attacks missed by others
Researcher finds fault with developer’s security processes
Small businesses that fail to offer security training remain at risk from employee ignorance, a new study finds.
A Google tool detects bad actors and defends against nation-state threats.
The NIST announces a draft of MFA security solutions to defend against ecommerce fraud.
COBALT DICKENS is likely responsible for large campaign targeting university credentials.
The T-Mobile security team discovered and stopped unauthorized access of customer data.
A single file containing nearly all Texas voter records was left on unsecured server.
NSA leaker Winner revealed true extent of Russian election hacking