> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
Traditional security will not find this new threat, experts warn.
The malware went undetected for years thanks to clever camouflage.
A 2-day conference exploring state-of-the-art advances in security automation. We would like to share the call for papers for THREADS 2014, a research and development conference that is part of NYU-Poly’s Cyber Security Awareness Week (CSAW). Trail of Bits is a founding sponsor of THREADS. The final...
Authentify offers prioritization for biometrics and other authentication mechanisms.
Intelligence services eavesdropped on secretary of state during key peace talks, according to a German report.
We’re proud to be a sponsor of the first Build it Break it programming contest, run by the University of Maryland (UMD) and supported by one of our own employees and PhD student at the university, Andrew Ruef. Build it Break it is a “flipped CTF” where contestants both implement secure software and...
First milestone for government plan to improve higher education options and close skills gaps.
Firefox developer exposed personal details of 76,000 users of its Developer Network
At Trail of Bits we are proud of our roots in academia and research, and we believe it is important to promote cyber security education for students of every academic level. We recently sponsored a High School Capture the Flag (CTF) event, we released a CTF Field Guide, and we are a regular part of...
The banking trojan has added use of remote desktop to evade security software.
Malware authors are looking for more bang for the buck.
New York, NY (July 15th, 2014)—Veteran computer security researcher Nicholas DePetrillo has joined Trail of Bits, the New York-based security company, as Principal Security Researcher. Trail of Bits Co-founder and CEO Dan Guido announced the hire today. DePetrillo brings the headcount of the firm, w...
The card-scraping bug have been undetectable by AV systems so far.
Washington wants to know more about micro-blogging users than any other government, according to latest Transparency Report.
VLAN, diode, air-gap, anti-virus, patch : ces solutions sont-elles utiles, indispensables, ou au contraire peu adaptées pour sécuriser un SI industriel ?
Ce sont des questions qui se posent naturellement aussi bien pour un site existant ainsi que pour un [...] Lire la suite
Kremlin wants tech giants to prove they’re not a conduit for NSA spying.
HP researchers discover 70% of the most common devices have vulnerabilities.
On June 28th Artem Dinaburg and Andrew Ruef will be speaking at REcon 2014 about a project named McSema. McSema is a framework for translating x86 binaries into LLVM bitcode. This translation is the opposite of what happens inside a compiler. A compiler translates LLVM bitcode to x86 machine code. M...
Cirrus Communications had half of its network taken down by attack earlier this week.
TG-3279 group wants to play games for free or re-use source code in competing products, says Dell