> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A US government IT worker pleaded guilty to leaking Top Secret files, underscoring insider threats. A phishing campaign leveraging Google Calendar invites has emerged, successfully bypassing multi-factor authentication (MFA). Additionally, Russian hackers, linked to APT29, are exploiting n-day vulnerabilities in iOS and Android devices through compromised websites. There are warnings about unpatched vulnerabilities in SonicWall's end-of-life software, and a significant cyberattack has disrupted the French blood service's temperature controls. Finally, a major security flaw in WordPress has been actively exploited, prompting alerts from CISA. Organizations should prioritize patching vulnerabilities and enhancing employee training to mitigate risks.
|
// AI-powered summary generated at 16:00
Beware malware gambits, Bitcoin phishing impersonators, Bitcoin-flipping scams and Bitcoin pyramid schemes.
71% of mobile devices still run on security patches that are more than two months old.
Break out your guayabera, it’s time for Infiltrate. Trail of Bits has attended every Infiltrate and has been a sponsor since 2015. The majority of the company will be in attendance this year (18 people!) and we’ll be swapping shirts and swag again. We’re looking forward to catching up with the lates...
Android gamers that fall for them will find themselves bombarded with aggressive ads, scam activity and malware in the future.
New revelations from WikiLeaks has shown capabilities to break into Apple products
McSema, our x86 machine code to LLVM bitcode binary translator, just got a fresh coat of paint. Last week we held a successful hackathon that produced substantial improvements to McSema’s usability, documentation, and code quality. It’s now easier than ever to use McSema to analyze and reverse-engin...
Dragos cuts through the hype when it comes to attacks on industrial sites
GUI vulnerability could allow attackers to steal info or spread ransomware
This blog has promoted control flow integrity (CFI) as a game changing security mitigation and encouraged its use. We wanted to take our own security advice and start securing software we use. To that end, we decided to apply CFI to facebook’s osquery, a cross-platform codebase with which we are dee...
The flaw would allow remote code execution and the ability to steal users’ passwords.
About 300 unique victims have been identified in Latin America over the past month, and more than 100GB of data stolen.
I recently had the privilege of giving a keynote at BSidesLisbon. I had a great time at the conference, and I’d like to thank Bruno Morisson for inviting me. If you’re into port, this is the conference for you! I recommend that anyone in the area consider attending next year. I felt there was a […]
Ramnit is an information-stealer (including banking and FTP credentials), which has been around for several years.
The Necurs botnet has seen a recent spike in activity, shifting its intent from malware distribution to penny stock pump-and-dump spamming.
Tens of thousands said to have been affected
Investigators pounce after postal workers raise alarm
A new, advanced point-of-sale (PoS) malware is taking aim at businesses across North America and Canada.
The vulnerability affects more than 40 of its products.
US government contracts could be a roadblock, it claims
According to Brian Krebs, the likely vector for the hack is Select’s PoS vendor.