> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
Geopolitics, meanwhile, seemed to guide major malware campaigns during the year.
Government contractor targeted in sophisticated attack
Today we released Echidna, our next-generation EVM smart fuzzer at EthCC. It’s the first-ever fuzzer to target smart contracts, and has powerful features like abstract state-machine modeling and automatic minimal test case generation. We’ve been working on it for quite some time, and are thrilled to...
Spiceworks stats reveal tipping point for adoption
Phantom Secure allegedly facilitated international criminals
What a roller coaster of a year! Well, outside of our office. Inside, 2017 was excellent. We published novel research that advanced – among others – the practices of automated bug discovery, symbolic execution, and binary translation. In the process, we improved many foundational tools that an incre...
LinkedIn has updated its terms of service and will become GDPR-compliant in May.
The Industrial Internet Consortium is looking to simplify IoT security.
Summary Due to a race condition in input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow.
The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCryp...
A full 62% admitted to experiencing an attack in the past 12 months.
Deal will see CyberArk advance privileged account security for the cloud
Summary Due to a race condition in input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow.
The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCryp...
Shadow IT challenge exposes patient data to risk, says CommonTime
McAfee spots eight new threats every second
Summary Due to missing input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow.
The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCrypto APIs are...
Firm gets proactive with $10m in reserves to help spur arrests
A new generation of crypto-jacking significantly improves on the unsophisticated mining campaigns seen so far.
The forum will focus on programs, professional development and networking to expand female representation.
The likely state-sponsored group is taking aim at the Middle East and Africa.
Only 11.2% have adopted the DMARC email security framework.