> TODAY'S SUMMARY (119 articles)
Today's cybersecurity landscape highlights several critical issues and ongoing threats. Siemens has issued 17 advisories for industrial control systems, while Rockwell has patched a vulnerability in their ArmorBlock devices. Microsoft has set a new record by addressing 1,413 vulnerabilities in its latest Patch Tuesday, including zero-days actively exploited. There is an urgent call from U.S. senators for improved federal AI safety and security measures, as AI systems increasingly become targets for exploitation. A recent cyberattack in France compromised IoT-connected fridges, raising alarms about the vulnerabilities of connected devices. Additionally, the U.S. has intensified efforts against North Korean hackers exploiting remote work setups, culminating in arrests tied to laptop farms. Overall, the surge in vulnerabilities and attacks underscores the need for proactive security measures across industries.
|
// AI-powered summary generated at 16:00
DDoS and APT campaigns are likely both state-sponsored.
An email campaign that’s spreading the Zeus banking trojan is using a new tactic: making use of compromised .edu domains.
Le précédent article consacré à shellshock introduisait le sujet et en donnait l’essentiel à savoir..
Ce second article examine les impacts sur les SI industriels en posant la question de la présence de la faille shellshock pour chaque type d’équipement. [...] Lire la suite
Crowti is similar to CryptoLocker, and is spreading through spam emails and exploit kits.
Gottrid Warg sent down for persistent and systemic attack
Au vu des analyses que l’on peut lire dans la presse, cette faille dépasserait en ampleur la précédente star des medias (Heartbleed dans OpenSSL), et menacerait internet de congestion en cas de ver qui comme Slammer [...] Lire la suite
Despite the recent data breach tsunami, admins are still sacrificing security for performance.
A large, coordinated malware effort is taking advantage of lax security at Mom-and-Pop businesses.
For every security engineer you train, there are 20 or more developers writing code with potential vulnerabilities. There’s no human way to keep up. We need to be more effective with less resources. It’s time to make security a fully integrated part of modern software development and operations. It’...
Enisa-led CyberEurope exercise features 400 IT security professionals
Hungry netizens get more than they bargain for
Cyber security is an increasingly complex and vibrant field that requires brilliant and driven people to work on diverse teams. Unfortunately, women are severely underrepresented and we want to change that. Career Discovery in Cyber Security is an NYU-Poly event, created in a collaboration with infl...
A rash of attacks show that chip-and-PIN cards aren't as safe as banks thought.
NIST warns of serious flaw which could allow a hacker to remotely lock handsets
Researchers spot Russian exit node modifying binaries via MITM patching
What appears to be a recon mission points out that a breach on such a high-profile target is inevitable.
A variant of the Dyreza/Dyre banking trojan malware is mounting a fresh offensive on the financial sector, witha new twist.
An eastern European organized crime gang is believed to have hit 51 ATMs over the May Day holiday.
DDoS attacks are becoming more common, increasingly sophisticated and more costly--but most businesses have no idea how to prepare.
The Axiom group victimized pro-democracy non-governmental organizations (NGO) with hundreds of thousands of infections.