> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
The breach was at a third-party firm that provides online customer support services to all three companies.
The volume of exposed data in the study totaled 12 petabytes, 4,000 times the size of the Panama Papers leak.
Plenty of static analyzers can perform vulnerability discovery on source code, but what if you only have the binary? How can we model a vulnerability and then check a binary to see if it is vulnerable? The short answer: use Binary Ninja’s MLIL and SSA form. Together, they make it easy to build and s...
All apps tested by Trustwave displayed at least 1 vulnerability, with 11 as the median number detected per application.
Chip giant to focus on newer models, as research highlights growing update challenges
Two years ago, when we began taking on blockchain security engagements, there were no tools engineered for the work. No static analyzers, fuzzers, or reverse engineering tools for Ethereum. So, we invested significant time and expertise to create what we needed, adapt what we already had, and refine...
China pegged for supporting North Korea hacking efforts
Social network on charm offensive with new privacy features
This is the second half of our blog post on the Meltdown an Spectre vulnerabilities, describing Spectre Variant 1 (V1) and Spectre Variant 2 (V2). If you have not done so already, please review the first blog post for an accessible review of computer architecture fundamentals. This blog post will st...
They believe that in the next year they will struggle to deal with cyber-threats or be unable to defend against them.
Half of UK businesses don't update default passwords on IoT devices when they are added to corporate networks.
Two weeks ago, we were engaged by CTS Labs as independent consultants at our standard consulting rates to review and confirm the technical accuracy of their preliminary findings. We participated neither in their research nor in their subsequent disclosure process. Our recommendation to CTS was to di...
The Department of Homeland Security doesn’t know who’s behind the eavesdropping equipment.
FireEye report reveals worrying trend
Intelligence and processes must improve, warns vendor
Third-party provider is targeted as firms scramble for workarounds
Many Americans are taking steps to change their behavior in order to be more protected.
60% of executives said they lack appropriate controls to protect their environments.
The app steals information, photos, phone numbers and so on from a mobile phone.
Grindr will stop sharing users’ HIV statuses after it was revealed they were shared with third-party analytics companies