> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
UK mobile phone security ranks shockingly low as phone theft persists.
Border Agency advisers didn’t do their job, tribunal rules
We are proud to announce that McSema is now open source! McSema is a framework for analyzing and transforming machine-code programs to LLVM bitcode. It supports translation of x86 machine code, including integer, floating point, and SSE instructions. We previously covered some features of McSema in...
The social network’s sharing function makes some blogs prime targets.
newGOZ Trojan is spreading globally and poised to start stealing funds.
A 2-day conference exploring state-of-the-art advances in security automation. We would like to share the call for papers for THREADS 2014, a research and development conference that is part of NYU-Poly’s Cyber Security Awareness Week (CSAW). Trail of Bits is a founding sponsor of THREADS. The final...
Unpatched software leaves the door open for widespread cyber-espionage and more.
Rather than intellectual property, the hackers went after patients’ personal data.
We’re proud to be a sponsor of the first Build it Break it programming contest, run by the University of Maryland (UMD) and supported by one of our own employees and PhD student at the university, Andrew Ruef. Build it Break it is a “flipped CTF” where contestants both implement secure software and...
Documents claim British spies are port scanning for vulnerabilities on a massive scale.
Private investigators allegedly used false identities to trick government staff into handing over personal info
At Trail of Bits we are proud of our roots in academia and research, and we believe it is important to promote cyber security education for students of every academic level. We recently sponsored a High School Capture the Flag (CTF) event, we released a CTF Field Guide, and we are a regular part of...
Social media messages loaded with malicious links and apps prey on fears of surveillance.
Edward Snowden reveals sophisticated new cyber strategy being developed by spy agency
New York, NY (July 15th, 2014)—Veteran computer security researcher Nicholas DePetrillo has joined Trail of Bits, the New York-based security company, as Principal Security Researcher. Trail of Bits Co-founder and CEO Dan Guido announced the hire today. DePetrillo brings the headcount of the firm, w...
Researcher finds bug in firmware making factory reset useless
Firm claims mixing upper and lower case with numbers and other characters makes no difference.
In a sign of the times, at least one non-security consulting firm is launching a cyber-incident response service.
The lawsuit could set an important precedent for cyber-heist liability.
Staff frequently take passwords with them and store business files in personal cloud services, says Intermedia.