> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
Hackers received a historically high payout at H1-702 2018.
A new survey finds that security teams are not consulted on IoT projects nearly 62% of the time.
A popular trend in smart contract design is to promote the development of upgradable contracts. At Trail of Bits, we have reviewed many upgradable contracts and believe that this trend is going in the wrong direction. Existing techniques to upgrade contracts have flaws, increase the complexity of th...
NIST launches a new privacy framework to give organizations strategies to mitigate privacy risks.
Report reveals how cyber-criminals are increasingly targeting the humans within businesses
Access Control Lists (ACLs) are an integral part of the Microsoft Windows security model. In addition to controlling access to secured resources, they are also used in sandboxing, event auditing, and specifying mandatory integrity levels. They are also exceedingly painful to programmatically manipul...
Nineteen-year-old also grounded United Airlines flight
Bitdefender report claims many don’t patch firmware
An increasing number of organizations and companies (including the federal government) rely on open-source projects in their security operations architecture, secure development tools, and beyond. Open-source solutions offer numerous advantages to development-savvy teams ready to take ownership of t...
Get Safe Online warns of 58% surge since 2017
Opsview and Core Security worked together on a timeline to release fixes and publish an advisory.
This spring and summer, as an intern at Trail of Bits, I researched modeling fault attacks on RSA signatures. I looked at an optimization of RSA signing that uses the Chinese Remainder Theorem (CRT) and induced calculation faults that reveal private keys. I analyzed fault attacks at a low level rath...
A class action lawsuit alleges foul play in preserving key evidence of data breach.
How is the role of the CISO changing, and what is driving their capability to do the job?
7,339 e-commerce stores unknowingly host a Magento card skimmer.
It is important to know what is going on inside the cyber-criminal’s mind, and what their motivations are
Bittrex removes Bitcoin Gold following May 51% attack
External attacks accounted for just 12% of reports last year
Search giant sees uptick in possible fraudulent activity
Controversial firm shutters bug bounty program