> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights critical threats in the software supply chain and the rising risks associated with AI technologies. Attackers have exploited OpsShield's trusted update channel, demonstrating vulnerabilities in software supply chains that could compromise user security. Meanwhile, financial institutions, such as Bank of America, are warning customers against sharing sensitive banking information with AI assistants, emphasizing the potential for significant financial risks. These developments underline the urgent need for enhanced security measures in both software development and user interactions with AI.
|
// AI-powered summary generated at 04:00
Cylance study also finds Russia is now perceived as biggest threat to US
Calls targeted the elderly, the infirm and low-income families, “the dumber and more broke the better.”
Microsoft exposed their users to a lot of risks when they released Windows Defender without a sandbox. This surprised me. Sandboxing is one of the most effective security-hardening techniques. Why did Microsoft sandbox other high-value attack surfaces such as the JIT code in Microsoft Edge, but leav...
More than $140,000 worth of Bitcoin ransom has been laundered and emptied from three online wallets.
SANS study warns organisations aren’t detecting incidents effectively
This year’s DEF CON CTF used a unique hardware architecture, cLEMENCy, and only released a specification and reference tooling for it 24 hours before the final event began. cLEMENCy was purposefully designed to break existing tools and make writing new ones harder. This presented a formidable challe...
DigiCert will face a tough task reviving the under-fire business
The hackers have apparently gained access to much more than a few pieces of content, including corporate email.
A bill enshrining the EU's GDPR regulation into UK law could be introduced in Parliament in just a few weeks.
Merck said it still doesn’t know the full magnitude of the impact of the attack.
FireEye has confirmed that business documents related to two separate customers in Israel have been ‘exposed’.
“Bateleur” features robust anti-detection capabilities
Attackers can record and stream conversations that take place within Alexa’s “hearing,” and send them to a remote computer.
AWS users asked to cease any and all use of VPNs and other anonymization and encryption technologies.
Rudd wants social media companies to step up action on terrorist content
Medicare patients on its insurance roster may be affected by identity theft, thanks to a potentially malicious employee at a third-party company.
Translations surge by triple digits, indicating robust information-sharing practices amid notable cybercrime incidents.
FireEye has refuted claims about compromise of its systems after an employee’s social media accounts were defaced.
Tech firm in a bind following government crackdown
About 60% of finance/insurance execs consider cybersecurity a very high priority, vs 15% in hospitality and food.