> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
Kaspersky Lab says they make use of "legal" spying tool to watch political targets.
Info-stealing malware used to distribute Gameover Zeus gets a facelift
On June 28th Artem Dinaburg and Andrew Ruef will be speaking at REcon 2014 about a project named McSema. McSema is a framework for translating x86 binaries into LLVM bitcode. This translation is the opposite of what happens inside a compiler. A compiler translates LLVM bitcode to x86 machine code. M...
FNR is aimed specifically at small web objects.
F-Secure spots Havex malware group narrowing a focus on ICS/SCADA systems
Trail of Bits headquarters has moved! Located in the heart of the financial district, our new office features a unique design, cool modern decor, and an open layout that makes us feel right at home. With fast internet, well-appointed conference rooms, and comfortable work stations, we feel that this...
Attacks aim to compromise user accounts so gangs can follow up with dating fraud.
Site forced to close after attacker infiltrated its EC2 control panel.
We are proud to have one of the only seven accepted funded-track proposals to DARPA’s Cyber Grand Challenge. Computer security experts from academia, industry and the larger security community have organized themselves into more than 30 teams to compete in DARPA’s Cyber Grand Challenge —- a first-of...
The groups are pooling resources to better assess and prevent attacks.
Researchers claim many developers are storing their authentication keys in the source code.
Free Online Coursework Allows Students, Professionals to Build Essential Offensive Security Skills New York, NY (May 20, 2014)–Security researchers at Trail of Bits today introduced the CTF Field Guide (Capture the Flag), a freely available, self-guided online course designed to help university and...
Even Amazon Web Services servers couldn’t cope with traffic overload.
Takedown-resistant click-fraud spike is expected to continue.
Lese majeste laws are a post-coup priority for new junta.
Hackers claim to have stolen sensitive information from over 600,000 European customers.
Cabinet Office co-sponsors pioneering program to find best country’s best young coders
FireEye claims attackers are out to compromise businesses involved in acquisitions for IP gain or access to sensitive info on the deal.
Kids as young as five are invited to test their social engineering skills.
The Android-targeting banking bug is morphing rapidly.