> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
The non-profit-driven awards showcase excellence in federal government information security.
Trail of Bits headquarters has moved! Located in the heart of the financial district, our new office features a unique design, cool modern decor, and an open layout that makes us feel right at home. With fast internet, well-appointed conference rooms, and comfortable work stations, we feel that this...
Approximately 76,000 victims were part of the Anonymous protest hack in March.
Sunde will face prison after two years on the lam.
We are proud to have one of the only seven accepted funded-track proposals to DARPA’s Cyber Grand Challenge. Computer security experts from academia, industry and the larger security community have organized themselves into more than 30 teams to compete in DARPA’s Cyber Grand Challenge —- a first-of...
Les Anderson spent 27 years developing security capabilities for likes of MoD and GCHQ.
Arbor Networks uncovers slick new malware targeting point of sale systems.
Free Online Coursework Allows Students, Professionals to Build Essential Offensive Security Skills New York, NY (May 20, 2014)–Security researchers at Trail of Bits today introduced the CTF Field Guide (Capture the Flag), a freely available, self-guided online course designed to help university and...
Engineer writes simple program to scan for and de-authorise Google Glass wearers.
The takedown was successful, but disruption may only last a week or two.
Background Friday night I sat down with a glass of Macallan 15 and decided to write a static checker that would find the Heartbleed bug. I decided that I would write it as an out-of-tree clang analyzer plugin and evaluate it on a few very small functions that had the spirit of the Heartbleed bug […]
APT hunter uncovers expanded target list including UK government and BBC
True believers looking for volunteers with a view to forking the code.
The agri-com and biotech giant has launched a forensics investigation.
Cavalier attitudes to password management, even for ex-employees, pave the way to a new era of data breaches.
Former defense secretary gates says French are most ‘capable’ hacking nation after China.
Staggering numbers of new samples appearing daily.
A PayPal phish evolves before researchers' eyes.
SLC sent personal data including medical records to the wrong people
FireEye data shows communications back to C&C servers in Russia and Ukraine spiked as geopolitical tensions heightened.