> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
At Trail of Bits we are proud of our roots in academia and research, and we believe it is important to promote cyber security education for students of every academic level. We recently sponsored a High School Capture the Flag (CTF) event, we released a CTF Field Guide, and we are a regular part of...
British man released from bail but another US indictment is filed as extradition pressure mounts.
Time, interest and funding are all lacking despite the reputation hazards of a data breach.
New York, NY (July 15th, 2014)—Veteran computer security researcher Nicholas DePetrillo has joined Trail of Bits, the New York-based security company, as Principal Security Researcher. Trail of Bits Co-founder and CEO Dan Guido announced the hire today. DePetrillo brings the headcount of the firm, w...
The malware uses the Tor anonymity network to attack its victims.
Research shows that insider threats continue long after job termination.
VLAN, diode, air-gap, anti-virus, patch : ces solutions sont-elles utiles, indispensables, ou au contraire peu adaptées pour sécuriser un SI industriel ?
Ce sont des questions qui se posent naturellement aussi bien pour un site existant ainsi que pour un [...] Lire la suite
Ofcom report shows only small percentage of users switched on parental controls.
Law enforcement agencies in several countries have carried out a joint disruption of the alleged perpetrators.
On June 28th Artem Dinaburg and Andrew Ruef will be speaking at REcon 2014 about a project named McSema. McSema is a framework for translating x86 binaries into LLVM bitcode. This translation is the opposite of what happens inside a compiler. A compiler translates LLVM bitcode to x86 machine code. M...
Criminals, as ever, adapt to go after low-hanging fruit.
Five new core tenants will underpin the framework.
Trail of Bits headquarters has moved! Located in the heart of the financial district, our new office features a unique design, cool modern decor, and an open layout that makes us feel right at home. With fast internet, well-appointed conference rooms, and comfortable work stations, we feel that this...
Palo Alto Networks warns of new risk to businesses from relative malware 'novices'.
Technologists also have a ‘civic duty’ to teach those around them how to use tech safely, whistleblower Edward Snowden says.
We are proud to have one of the only seven accepted funded-track proposals to DARPA’s Cyber Grand Challenge. Computer security experts from academia, industry and the larger security community have organized themselves into more than 30 teams to compete in DARPA’s Cyber Grand Challenge —- a first-of...
US intelligence pointed finger at Moscow but questions remain three years on.
Tor and key-based encryption anchor this sophisticated malware.
Latest phony email claims recipient’s account has been blocked.
A survey suggests that this vulnerability is the most critical in any organization.