> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
Privacy regulation will land in two months’ time
Mabna Institute accused of massive IP theft from global universities
Two years ago, when we began taking on blockchain security engagements, there were no tools engineered for the work. No static analyzers, fuzzers, or reverse engineering tools for Ethereum. So, we invested significant time and expertise to create what we needed, adapt what we already had, and refine...
Bold post-Brexit move from government with patchy record on cyber
A joint law enforcement operation has seen the Carbanak Kingpin and crew arrested
This is the second half of our blog post on the Meltdown an Spectre vulnerabilities, describing Spectre Variant 1 (V1) and Spectre Variant 2 (V2). If you have not done so already, please review the first blog post for an accessible review of computer architecture fundamentals. This blog post will st...
Trustico claims it is suffering after 23,000 certificates were revoked, and that it never deliberately exposed private keys
Microsoft will prevent RDP clients from accessing Windows Server if they have not patched to address a security flaw
Two weeks ago, we were engaged by CTS Labs as independent consultants at our standard consulting rates to review and confirm the technical accuracy of their preliminary findings. We participated neither in their research nor in their subsequent disclosure process. Our recommendation to CTS was to di...
The Internet Engineering Task Force publishes 1.3 of the TLS protocol
Users find Facebook has been keeping records of their calls and text messages
Today we released Echidna, our next-generation EVM smart fuzzer at EthCC. It’s the first-ever fuzzer to target smart contracts, and has powerful features like abstract state-machine modeling and automatic minimal test case generation. We’ve been working on it for quite some time, and are thrilled to...
Panel of experts discuss the threat of ransomware
US police now use fingerprints of deceased criminals to unlock their iPhone devices
What a roller coaster of a year! Well, outside of our office. Inside, 2017 was excellent. We published novel research that advanced – among others – the practices of automated bug discovery, symbolic execution, and binary translation. In the process, we improved many foundational tools that an incre...
The majority of businesses know very little about the nature of the security breaches
The City of Atlanta’s computer network suffers ransomware attack
How drawing synergies between PCI standards and GDPR can deliver a more holistic information security privacy framework
Appointing a data protection officer is a mandatory requirement under the GDPR regardless of the size of the organization.
State-sponsored terrorist groups, organized criminals, hacktivists and hackers will work together in various collaborations.