> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
Microsoft and Adobe updates make for a busy July
Time to containment remains stubbornly high, according to IBM
Tim Alberdingk Thijm As part of my Springternship at Trail of Bits, I created a series of data-flow-based optimizations that eliminate most “dead” stores that emulate writes to machine code registers in McSema-lifted programs. For example, applying my dead-store-elimination (DSE) passes to Apache ht...
Risk IQ report says 800 other top sites are affected
Major acquisitions could boost cybersecurity offerings.
We have a soft spot in our hearts for SummerCon. This event, the longest-running hacker conference in the US, is a great chance to host hacker friends from around the world in NYC, catch up in person, and learn about delightfully weird security topics. It draws a great crowd, ranging from “hackers t...
Organizations lack the ability to analyze the data they collect.
Advanced persistent threat trends in Q2 2018
As great as it is, osquery could be a whole lot better. (Think write access for extensions, triggered responses upon detection, and even better performance, reliability and ease of use.) Facebook’s small osquery team can’t respond to every request for enhancement. That’s understandable. They have th...
Eset reveals latest use of popular black hat tactic
Reporters unmask military and intelligence personnel
Reprise d’activité de ce blog ! Et comme premier billet, un retour sur Wannacry et surtout notPetya, attaques ayant réussi l’exploit de causer des centaines de millions d’euros de perte suite à l’interruption de lignes de productions dans des usines [...] Lire la suite
They claim vendor failed in its PCI DSS compliance reporting
Washington DC's Metro opts not to post results of recent internal cybersecurity audit
Increased Breaches, Growing Loss Prompt Changes to NZ Privacy Bill
DomainFactory confirmed breach after forum user claimed access to customer data
Compromised admin credential to blame again
Programmer’s $50m dark web gamble fails to pay off
New complex will cement capital’s position as global legal hub, says government
Will India's ban on cryptocurrencies drive traders to black markets?