> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
A safer digital Britain will be built on innovation, agility and a diverse workforce
Bromium study highlights problems facing police
Welcome to the third post in our series about osquery. So far, we’ve described how five enterprise security teams use osquery and reviewed the issues they’ve encountered. For our third post, we focus on the future of osquery. We asked users, “What do you wish osquery could do?” The answers we receiv...
A number of high-profile music videos defaced, according to reports
Cybersecurity experts should look to be better translators of issues to the board
You’ve just approved a security review of your codebase. Do you: Send a copy of the repository and wait for the report, or Take the extra effort to set the project up for success? By the end of the review, the difference between these answers will lead to profoundly disparate results. In the former...
GCHQ body warns that online attacks continue to rise
Verizon report highlights risk of human error and misuse
Plenty of static analyzers can perform vulnerability discovery on source code, but what if you only have the binary? How can we model a vulnerability and then check a binary to see if it is vulnerable? The short answer: use Binary Ninja’s MLIL and SSA form. Together, they make it easy to build and s...
The injectors modify HTTP headers on network requests with malicious code; the code then tricks captive portals into connecting to the internet.
More than a quarter (27%) of recipients clicked the link in mock phishing mails.
Two years ago, when we began taking on blockchain security engagements, there were no tools engineered for the work. No static analyzers, fuzzers, or reverse engineering tools for Ethereum. So, we invested significant time and expertise to create what we needed, adapt what we already had, and refine...
An elaborate fraud is bent on draining the bank accounts of large corporations.
Firms need to up their game ahead of deadline next month
This is the second half of our blog post on the Meltdown an Spectre vulnerabilities, describing Spectre Variant 1 (V1) and Spectre Variant 2 (V2). If you have not done so already, please review the first blog post for an accessible review of computer architecture fundamentals. This blog post will st...
Malwarebytes sees nefarious mining activity continue to hit users and businesses
Over 160,000 systems remain vulnerable, says Talos
It mines unsuspecting victim machines for Monero and other virtual currencies, but its most unusual characteristic is how cheap it is.
According to PureSec's audit, most vulnerabilities and weaknesses were caused by human error.
The culprit is a cybersecurity breach at third-party software provider, [24]7.ai, which provides online automated chat.