[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (41 articles)

|

// AI-powered summary generated at 12:00

> It Could Happen to Anyone: FS-ISAC Falls for a Phish
The financial industry's forum for collaboration on critical security threats was compromised with an unsophisticated phish.
> #GartnerIAM: Common Privilege Pitfalls Are Easily Overcome
There has never been a greater need for PAM
> SVE-2017-8975: TOCTOU Race Condition in Samsung TrustZone SCrypto Driver
Summary Due to a race condition in input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow. The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCryp...
> #GartnerIAM: IAM Disrupted by New Trends
IAM is being disrupted by new trends, but they need not be a problem for the business
> Breaches on the Rise as 70% of Healthcare Firms Are Hit
Thales eSecurity claims 39% have been breached in the past year alone
> SVE-2017-8974: TOCTOU Race Condition in Samsung TrustZone SCrypto Driver
Summary Due to a race condition in input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow. The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCryp...
> SEC Issues Subpoenas to Crypto-Currency Firms
US regulator getting serious about nascent industry
> NCSC Warns Charities of Cyber-Threats
GCHQ body releases new guidance for third sector
> SVE-2017-8973: Buffer Overflow in Samsung TrustZone SCrypto Driver
Summary Due to missing input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow. The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCrypto APIs are...
> #GartnerIAM: Focus More on Basics Than Unknown Threats
Patching and security hygiene will remain a trend for the coming years
> GitHub Hit by 1.35Tbps Memcached DDoS
GitHub was hit by a DDoS attack which peaked at 1.35Tbps via 126.9 million packets per second.
> UK and Aussie Governments Sign Up to Breach Aggregation Site
Have I Been Pwned? will help keep government log-ins secure
> Equifax Breach: Another Two Million Consumers Affected
Credit agency finds additional driver’s license data was compromised
> One in Eight Open Source Components Contain Flaws
Sonatype research claims number downloaded in UK has soared 120%
> US Marines Confirm 21,000 Details Exposed in Data Breach
The personal data of US Marines, sailors and civilians have been accidentally disclosed in email breach.
> UK Uni Students Lose ÂŁ100,000 to Phishers
Student Loans Company scams on the rise
> Secret German Government Network Attacked
Reports suggest hackers may have had access for a year
> SSL Snafu Ends in 23,000 Revoked Certs
DigiCert and Trustico feud hits UK websites
> Half of Orgs Don't Change Security Strategy, Even After an Attack
Security inertia has infiltrated many orgs resulting in an inability to repel or contain attacks
> Research Finds No Guidance Results in Weak Passwords
75% choose "weak" passwords with no guidance on how to create a strong option.