> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Airport networks put business travelers at heightened risk, according to a new report.
IBM researchers have created a new approach to container isolation with the launch of Nabla containers, designed for strong isolation on a host.
Depuis 18 mois que je me penche sur le Règlement Général de Protection des Données (RGPD, ou GDPR en anglais), j’ai relevé deux éléments qui reviennent systématiquement lors de mes interventions :
Une démarche de conformité RGPD n’est en réalité [...] Lire la suite
Another Amazon S3 bucket misconfiguration left hundreds of thousands of voter records exposed.
The UK government is not addressing the need for cybersecurity skills for critical national infrastructure
Tim Alberdingk Thijm As part of my Springternship at Trail of Bits, I created a series of data-flow-based optimizations that eliminate most “dead” stores that emulate writes to machine code registers in McSema-lifted programs. For example, applying my dead-store-elimination (DSE) passes to Apache ht...
Cisco's wireless architecture updated with 25 bug patches following vulnerability discovery
Research finds security spending for retailers is up but not aligning with risk.
We have a soft spot in our hearts for SummerCon. This event, the longest-running hacker conference in the US, is a great chance to host hacker friends from around the world in NYC, catch up in person, and learn about delightfully weird security topics. It draws a great crowd, ranging from “hackers t...
SPF and DMARC gaps slow email authentication in federal agencies, according to Proofpoint.
The cost of credential spills is highest for banking and e-commerce, said a new report from Shape Security.
As great as it is, osquery could be a whole lot better. (Think write access for extensions, triggered responses upon detection, and even better performance, reliability and ease of use.) Facebook’s small osquery team can’t respond to every request for enhancement. That’s understandable. They have th...
LabCorp has shut down its systems after a suspected network breach, which could have put millions of health records at risk
The US elections continue to hit the headlines
Report shows traditional tech support scams are back on the rise, while cryptomining stagnates
A survey of Infosecurity Europe shows a fear that GDPR spending hinders threat detection.
Cyber incidents using spyware are on the rise, reports Positive Technologies.
Lost mobiles and laptops on the Transport for London network could be resulting in an increase in data breaches
Millions of records were exposed in a telecom vendor breach.
Reprise Software has refused to patch a vulnerability in its Reprise License Manager