> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
Netizens warned not to open suspicious attachments after pantomime ticket scam
IT security professionals need to go against their gut to improve risk visibility and change behavior
In light of the recent compromises, you’re probably wondering what could have been done to prevent such attacks. According to some unverified articles it would appear that flaws in Apple’s services allowed an attacker to brute force passwords without any rate limiting or account lockout. While its...
SaaS pioneer warns that credential-stealing banking malware may be targeting its customers
Firefox 32 does not support 1024-bit certificate authority (CA) certificates
In this post, we discuss the creation of a novel software obfuscation toolkit, MAST, implemented in the LLVM compiler and suitable for denying program understanding to even the most well-resourced adversary. Our implementation is inspired by effective obfuscation techniques used by nation-state malw...
Apple handsets most in demand, says government
Admins look forward to a lighter round of Microsoft security updates
We are proud to announce that McSema is now open source! McSema is a framework for analyzing and transforming machine-code programs to LLVM bitcode. It supports translation of x86 machine code, including integer, floating point, and SSE instructions. We previously covered some features of McSema in...
The latest government cybersecurity bill has come under attack.
New capabilities are expanding the malware's target area and threat level.
Tim Cook stressed the "awareness piece" and said that 2FA is coming for mobile logins.
Bank jumps aboard the biometrics bandwagon in bid to reduce corporate account fraud
Beijing keen to censor and monitor searches made by users of CERNET education network
APT12 keeps a close eye on media coverage to stay one step ahead of defences, says FireEye
Nearly one million new phishing sites have appeared this year so far.
Social engineering lures using Facebook, Twitter and fake 'photos' are proliferating on the web.
Trend Micro sees participants and message volumes double
Malware targeted third party payment processing systems
Harkonnen Operation sent data to domains registered to false UK companies