> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
2017 saw a drop in ransom demand and ransomware families, while cryptojacking exploded.
That’s a 28% increase from 2017 spending of $1.2 billion.
Two weeks ago, we were engaged by CTS Labs as independent consultants at our standard consulting rates to review and confirm the technical accuracy of their preliminary findings. We participated neither in their research nor in their subsequent disclosure process. Our recommendation to CTS was to di...
Excessive alerts, outdated metrics and limited integration are leading to over-taxed resources within these SOCs.
The group is using previously unseen malware to abuse Google Drive, SmartFile and ISAPI filters.
Today we released Echidna, our next-generation EVM smart fuzzer at EthCC. It’s the first-ever fuzzer to target smart contracts, and has powerful features like abstract state-machine modeling and automatic minimal test case generation. We’ve been working on it for quite some time, and are thrilled to...
Google goes all out with its latest announcements to its Cloud Security offering
Bitcoin's blockchain can store data, including images of child pornography
What a roller coaster of a year! Well, outside of our office. Inside, 2017 was excellent. We published novel research that advanced – among others – the practices of automated bug discovery, symbolic execution, and binary translation. In the process, we improved many foundational tools that an incre...
ProtonMail now included in CA saga
Hackers likely accessed the popular travel-booking site, exposing payment card info, during two periods.
Summary Due to a race condition in input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow.
The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCryp...
The malware will intercept mobile calls and direct victims to a scammer impersonating a bank agent.
The FIDO Alliance has expanded its certification program to include multi-level security certifications.
Summary Due to a race condition in input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow.
The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCryp...
Businesses across the globe are concerned about email phishing campaigns
UK Police forces spent around £1.3m over three years according to new report
Summary Due to missing input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow.
The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCrypto APIs are...
Information Commissioner urgently seeks a court warrant to enter the company’s London HQ
When a verified celebrity account posts a tweet, a fraud account using the same image and display name responds with a scam offer.