> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
The surge in cryptominers started after the price of Bitcoin skyrocketed to $20,000.
A 31-point perception gap exists between male and female respondents, with 82% of men saying women have equal opportunities.
Welcome to the third post in our series about osquery. So far, we’ve described how five enterprise security teams use osquery and reviewed the issues they’ve encountered. For our third post, we focus on the future of osquery. We asked users, “What do you wish osquery could do?” The answers we receiv...
The group pledges to design offerings that prioritize security and privacy, commit to better user education and collaborate on info sharing.
Kirstjen Nielsen talks DHS strategies to protect citizens and organizations from cyber-attacks, breaches and cybercrime
You’ve just approved a security review of your codebase. Do you: Send a copy of the repository and wait for the report, or Take the extra effort to set the project up for success? By the end of the review, the difference between these answers will lead to profoundly disparate results. In the former...
Rohit Ghai, President of RSA Security, presented an optimistic view of the industry, explaining why he believes cybersecurity is getting better, not worse.
Christopher D. Young takes to the stage at RSA 2018
Plenty of static analyzers can perform vulnerability discovery on source code, but what if you only have the binary? How can we model a vulnerability and then check a binary to see if it is vulnerable? The short answer: use Binary Ninja’s MLIL and SSA form. Together, they make it easy to build and s...
Brad Smith, President at Microsoft, called for a new digital Geneva Convention.
Accenture report shows firms are getting better at blocking threats
Brian Krebs found groups operating with impunity for years
GCHQ warns UK telcos to steer clear, although Huawei is still OK
Forrester VP Principal Analyst Julie A. Ask considered the key trends in digital business transformation and the impact they are having on security.
Common mistakes in secret management and solutions to the problem
Managing individual and environmental factors to solve infosec problems
ViperRAT 2.0 and Desert Scorpion represent a rare instance of a malicious APT in an official app marketplace.
High-severity vulnerabilities were found in 100% of tested banking and finance web applications.
Ten cyber-defense teams faced off in Orlando, competing as white-hat hackers to protect a fictional biotech company called Volitech.
Russian attackers have conducted a sustained campaign targeting routers, say the DHS, FBI and NCSC.