> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
The popular online gaming outlet has been infiltrated to push credential-stealing malware.
Activists urge tech giants to revoke certificates.
This is part two of a two-part blog post that shows how to use KLEE with mcsema to symbolically execute Linux binaries (see the first post!). This part will cover how to build KLEE, mcsema, and provide a detailed example of using them to symbolically execute an existing binary. The binary we’ll be s...
Feds want more tech experts in their crime-fighting ranks.
The people behind Backoff have been using surveillance cameras to verify that machines are in fact POS devices.
At THREADS 2014, I demonstrated a new capability of mcsema that enables the use of KLEE, a symbolic execution framework, on software available only in binary form. In the talk, I described how to use mcsema and KLEE to learn an unknown protocol defined in a binary that has never been seen before. In...
The attack makes use of the laptops’ physical Thunderbolt interface to achieve persistent boot rootkits.
War torn country sucked into Beijing’s South Asian strategy
Russian cyber-criminals target internal banking systems
Hot topics will include cloud security and mobility—and the intersection between them.
A citizen media group critical of ISIS was recently targeted in a customized digital attack designed to unmask their location.
A variant of the Alina malware, used to scrape credit card (CC) data from point of sale (POS) software, has been rampaging its way through the wild lately.
Bitdefender claims cyber-criminals will look to new channels to spread malware in 2015
Employees feel let down by movie giant after their personal data was exposed
Cinema chains refuse to screen 'The Interview'
Denial of service blitz last year was largest ever recorded at the time
CSP takes aim at XSS and prevents extensions from loading unsafe code.
Latest Financial Stability Report says much work still to be done
Eset report claims crypto-malware has now infected 40,000 users
The file-sharing site that was known for living up to its name has been replicated.