> TODAY'S SUMMARY (41 articles)
Today's cyber news highlights significant threats, particularly targeting industrial refrigeration systems. The FBI and CISA have issued warnings about attacks that can manipulate temperatures in supermarket refrigeration, posing risks to food safety and supply chains. In the realm of vulnerabilities, a memory safety flaw in CPython could allow AI inference servers to be compromised. Additionally, a critical exploit in OpenSSH may enable unauthorized access to password-disabled accounts on certain Linux systems. Meanwhile, phishing schemes leveraging fake OpenAI events are being reported, aimed at stealing Microsoft and Google accounts. The ongoing escalation of AI-driven attacks is also notable, with incidents targeting fintech firms during off-hours.
|
// AI-powered summary generated at 12:00
Chip giant’s bug bounty program is now public
Schneier et al want Feds to show exactly how they’d propose doing it
We’re helping Parity Technologies secure their Ethereum client. We’ll begin by auditing their codebase, and look forward to publishing results and the knowledge we gained in the future. Parity Technologies combines cryptography, cellular systems, peer-to-peer technology and decentralized consensus t...
The campaign was unique because adversaries leveraged Google AdWords to poison user search results in order to steal users’ wallets.
A full 587 vulnerabilities were reported across Windows Vista, Windows 7, Windows 8.1/RT 8.1 and Windows 10 operating systems in 2017.
In the past few weeks the details of two critical design flaws in modern processors were finally revealed to the public. Much has been written about the impact of Meltdown and Spectre, but there is scant detail about what these attacks are and how they work. We are going to try our best to fix […]
Three different variants of crypto-mining code are included in January's top 10 most-prevalent malware rankings.
92% of IT pros concerned about risks of using public Wi-Fi on company-owned devices
Summary This is the third part of a blog series covering my security research into Samsung’s TrustZone.
This post covers the following vulnerabilities that I have found:
SVE-2017–8888: Authentication Bypass + Buffer overflow in tlc_server SVE-2017–8889: Stack buffer overflow in ESECOMM Trustlet SVE-...
RCE and privilege elevation vulnerabilities abound
Accenture report claims cybercrime costs are higher than any other sector
Summary This is the second part of a blog series covering my security research into Samsung’s TrustZone.
This post is a companion to my talk from Ekoparty 2017, namely the reverse engineering process of T-base. The slides and video of the talk are both available online.
In fact, since both of those...
Kaspersky Lab claims Russian hackers also used it to install backdoor
Infrastructure upgrades and network defense were prioritized by just 25% of CISOs.
Summary This is the first part of a blog series about reverse engineering and exploiting Samsung’s TrustZone. Following parts in the series so far: 2, 3.
This first post covers the basics of the architecture. All of this is public info, nothing new, all of it has been covered in bits and pieces in v...
Farshchi is perhaps best known for being the person who took up the reins as CISO at The Home Depot after its breach.
Meanwhile, 67% of respondents claimed they don't have sufficient staff to handle the daily barrage of cyber-alerts they receive.
Wire transfer fraud dominates as scammers widen the net
Small businesses also experienced serious downtime, according to Datto
Crypto-exchange founder now claims Nano developers defamed him