> TODAY'S SUMMARY (119 articles)
Today's cybersecurity landscape highlights several critical issues and ongoing threats. Siemens has issued 17 advisories for industrial control systems, while Rockwell has patched a vulnerability in their ArmorBlock devices. Microsoft has set a new record by addressing 1,413 vulnerabilities in its latest Patch Tuesday, including zero-days actively exploited. There is an urgent call from U.S. senators for improved federal AI safety and security measures, as AI systems increasingly become targets for exploitation. A recent cyberattack in France compromised IoT-connected fridges, raising alarms about the vulnerabilities of connected devices. Additionally, the U.S. has intensified efforts against North Korean hackers exploiting remote work setups, culminating in arrests tied to laptop farms. Overall, the surge in vulnerabilities and attacks underscores the need for proactive security measures across industries.
|
// AI-powered summary generated at 16:00
Repurposed attack easier than last time as it targets TLS
Only around a third are adequately tooled up
This is part two of a two-part blog post that shows how to use KLEE with mcsema to symbolically execute Linux binaries (see the first post!). This part will cover how to build KLEE, mcsema, and provide a detailed example of using them to symbolically execute an existing binary. The binary we’ll be s...
Banks and other financial institutions now have the go-ahead to pursue compensation from the retail giant via class-action lawsuits.
Shearer will succeed executive director Hord Tipton at the end of 2014.
At THREADS 2014, I demonstrated a new capability of mcsema that enables the use of KLEE, a symbolic execution framework, on software available only in binary form. In the talk, I described how to use mcsema and KLEE to learn an unknown protocol defined in a binary that has never been seen before. In...
With IoT apps such as remote control of household appliances, health monitoring devices and hotel room keys, the need to verify the identities of mobile device users will become even more urgent.
The bebe breach bucks the trend of cyber-criminals going for larger retailers; the attackers targeted customers with higher spending limits.
IBM has uncovered a vulnerability in the social log-in services provided by Amazon and LinkedIn that allow consumer impersonation.
Security vendor joins F-Secure and Trend Micro
Last Patch Tuesday of the year will be relatively light
Health insurance providers are investing heavily in web and mobile apps to establish new customer touch points, creating a host of new external facing security challenges for providers.
Lookout claims users in developing countries are at risk
Chinese giant releases top 100 questions to ask your vendor
A staggering 82% of all companies have experienced at least one online attack in the last year alone.
The goal is to help members capture, process and work together to respond to online threats.
Phone scams soar by 17% over the past year, according to Financial Fraud Action UK
The ISIS-supporting Lizard Squad hacking collective took credit, echoing the Sony PlayStation Network attack from August.
Critical vulnerability raises alarms for service providers
Project IOS Transatlantic V scores another hit as counterfeiters are shut down