> TODAY'S SUMMARY (13 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant vulnerability in APT allows verified packages to be replaced and executed with root access on Debian and Ubuntu systems. In the U.S., a Canadian man faces charges for hacking university supercomputers to mine cryptocurrency. CISA warns that hackers are exploiting a patched Apple flaw to deliver info-stealing malware. Companies are increasing their cybersecurity budgets, especially for AI governance, but still struggle with control. Additionally, advancements in AI are intensifying concerns over security, as evidenced by the growing sophistication of AI agents and supply chain attacks, such as the one targeting OpsShield.
|
// AI-powered summary generated at 08:00
RCE flaws spotted by UK’s National Cyber Security Centre
Government needs to raise its game, says industry body
If you’re building real applications with blockchain technology and are worried about security, consider this meetup essential. Join us on December 12th for a special edition of Empire Hacking focused entirely on the security of Ethereum. Why attend? Four blockchain security experts will be sharing...
There are four distinct groups of cyber-criminals: traditional gangs, state-sponsored attackers, ideological hackers and hackers-for-hire
Key services disrupted for over a million residents
In the year since we ported osquery to Windows, the operating system instrumentation and endpoint monitoring agent has attracted a great deal of attention in the open-source community and beyond. In fact, it recently received the 2017 O’Reilly Defender Award for best project. Many large and leading...
An espionage campaign being carried out in the Middle East uses a vulnerability less than a week after Microsoft patched it.
The plan addresses a hot-button topic in the wake of Russian meddling in the US presidential election last year.
Last week Zeppelin released their Ethereum CTF, Ethernaut. This CTF is a good introduction to discover how to interact with a blockchain and learn the basics of the smart contract vulnerabilities. The CTF is hosted on the ropsten blockchain, and you can receive free ethers for it. The browser develo...
The compromise was highly professional and involved “sophisticated social engineering"—leading to the loss of 4,700 bitcoins.
Attackers and spies are merging to use tools to extort companies, using espionage and cybercrime tools.
UK regulator urges more openness for the good of the industry
Shoppers at charity’s web store hit by follow-on fraud
Crumbaugh demonstrated how to get a target to install malware, bypass anti-virus and how he won the confidence of the target
Three-quarters of UK consumers have been scammed in the process of purchasing goods online.
Better understanding of cybersecurity issues, cross-border agreements and the tools to take action will offer better security for governments
Privacy International claims firms are failing to protect driver and passenger privacy
Virtual keyboard maker collected huge range of personal and device data
Understanding and communication of problems will continue to be a challenge for security practitioners
Huntsman Security warns skills shortage will hamper efforts over next two years