> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
Customer spots serious API oversight
Man in the middle hits mobile users as crackdown on encrypted services continues
We need to do more to protect ourselves. 2014 overflowed with front-page proof: Apple, Target, JPMorgan Chase, etc, etc. The current, vulnerable status quo begs for radical change, an influx of talented people, and substantially better tools. As we look ahead to driving that change in 2015, we’re pr...
This is the third iteration of the kit since the source code for the original version was leaked in June 2013
Attackers’ strategies have radically shifted from simple premium SMS scams
This is part two of a two-part blog post that shows how to use KLEE with mcsema to symbolically execute Linux binaries (see the first post!). This part will cover how to build KLEE, mcsema, and provide a detailed example of using them to symbolically execute an existing binary. The binary we’ll be s...
Bitdefender reveals yet another lure which social media users should avoid
Damballa report claims 21,000 hours are wasted dealing with fallout from poor security controls
New study claims communication breakdown is harming risk management efforts
The hospitality giant said that it wanted to manage the connections in order to maintain security standards.
The attack took pains to appear to be state-sponsored.
DHS completely lacks a strategy when it comes to the security of the computers that monitor and control building operations.
UK PM Cameron faces Brussels showdown over plans to ban encrypted comms
Easy for admins but a controversial update round for Redmond
Dell SecureWorks spots new threat, but it lacks persistence
Thieves with stolen usernames and passwords have broken into customer accounts, booking trips with frequent flier miles.
Twice as many take security more seriously at home than in the office
Top 10 vulnerabilities in web apps and infrastructure revealed
Chinese censors tweak their tactics to counter anti-DNS poisoning tools
Cloud security oversight has shifted from the IT room to the boardroom, with 61% of companies indicating that executives are now involved in such decisions.