> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
Cloudmark study claims critical business and customer data at risk
Latest ransomware spotted by researchers uses Elliptic Curve Cryptography
This is part two of a two-part blog post that shows how to use KLEE with mcsema to symbolically execute Linux binaries (see the first post!). This part will cover how to build KLEE, mcsema, and provide a detailed example of using them to symbolically execute an existing binary. The binary we’ll be s...
A vulnerability in the RevSlider plug-in opens the door to complete website compromise.
Users of the consumer version of the Malwarebytes Anti-Malware and Anti-Exploit should upgrade to the latest version of the security software as soon as possible.
At THREADS 2014, I demonstrated a new capability of mcsema that enables the use of KLEE, a symbolic execution framework, on software available only in binary form. In the talk, I described how to use mcsema and KLEE to learn an unknown protocol defined in a binary that has never been seen before. In...
Dell SecureWorks report finds increased competition is forcing better customer service
Cryptoy is designed to get more children interested in cybersecurity
Flash report comes just days after Operation Cleaver revelations
The malware intercepts text messages and harvests information from the phone.
Microsoft said that the busy Dyreza RAT has a fresh attack vector using a wire transfer phish.
GCHQ and NCA to co-operate, but critics say it’s simply electioneering
Cyber-criminals targeting victims inside Great Firewall are blamed for malicious domain registrations
In a new wrinkle in an ongoing attack, the BlackEnergy malware is targeting internet-connected human-machine interfaces (HMIs).
Mobile payments processor only partially encrypted data travelling across its network
Imperva spots attackers using shopping period as cover to steal data and break systems
An attacker could alter product prices, delete goods or close a merchant’s shop on the site.
Cloud Atlas uses an unusual set of tactics that are not very common in the APT world, including using cloud accounts for C&C communications.
The highly sophisticated malware targets wireless and PC users in high-value positions.
Panel also urges greater government transparency