> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
An insecure backup incident affects 35,000 employees over a period of nine months.
The flaw in mobile app development plagues many messaging apps.
Free Online Coursework Allows Students, Professionals to Build Essential Offensive Security Skills New York, NY (May 20, 2014)–Security researchers at Trail of Bits today introduced the CTF Field Guide (Capture the Flag), a freely available, self-guided online course designed to help university and...
(ISC)² will honor excellence in advancing the nation’s public-sector cybersecurity posture on June 3.
Privacy International warns that various PC components could retain data, raising concerns over recycled IT kit.
Background Friday night I sat down with a glass of Macallan 15 and decided to write a static checker that would find the Heartbleed bug. I decided that I would write it as an out-of-tree clang analyzer plugin and evaluate it on a few very small functions that had the spirit of the Heartbleed bug […]
The powerful iBanking Android malware spreads beyond Russian cyber-gangs.
Lavabit heir built by CERN boffins sees huge demand for its NSA-proof email capabilities.
Mandiant owner says connection days and times fit perfectly with the average PLA working day.
If a malware infection is suspected, Facebook will prompt the user to run a scanner from F-Secure or Trend Micro.
Several concerning security practices point to a compromise that may have been prevented – or at least significantly mitigated.
Bureau director Comey admits he may have to relax zero tolerance approach to marijuana-smoking recruits in bid to attract best talent.
Cyber Squared’s ThreatConnect team warns that increasing tensions in the area could put military, diplomatic and economic interests at risk.
Damballa researchers warn malware redirects users to porn sites if none can be found in browsing history.
The United States has filed an unprecedented set of indictments against five Chinese military officials believed to be responsible for wide-ranging cyber-espionage on private-sector U.S. companies.
Researchers have discovered three information-disclosure vulnerabilities affecting thousands of home routers and Brocade load-balancers.
Coordinated campaign looks to lock down remote access tool.
Cybercriminals package malware inside legitimate looking security software
A new, wide-net malware attack posing as an “important company update” is being spammed out, targeting Windows users. The campaign carries an unusual differentiator: it uses gadget files to do the dirty work.
The reverberations from Edward Snowden’s disclosures regarding the National Security Agency continue, with the National Institute of Standards and Technology (NIST) announcing it has begun a review of the institute’s cryptographic standards and guidelines program.