> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A US government IT worker pleaded guilty to leaking Top Secret files, underscoring insider threats. A phishing campaign leveraging Google Calendar invites has emerged, successfully bypassing multi-factor authentication (MFA). Additionally, Russian hackers, linked to APT29, are exploiting n-day vulnerabilities in iOS and Android devices through compromised websites. There are warnings about unpatched vulnerabilities in SonicWall's end-of-life software, and a significant cyberattack has disrupted the French blood service's temperature controls. Finally, a major security flaw in WordPress has been actively exploited, prompting alerts from CISA. Organizations should prioritize patching vulnerabilities and enhancing employee training to mitigate risks.
|
// AI-powered summary generated at 16:00
Bots make up 40% of all web traffic, with bad bots targeting sensitive information which can be used for fraud and other crimes
About 33 million records of personal information on employees of government and Fortune 100 companies have been leaked.
McSema, our x86 machine code to LLVM bitcode binary translator, just got a fresh coat of paint. Last week we held a successful hackathon that produced substantial improvements to McSema’s usability, documentation, and code quality. It’s now easier than ever to use McSema to analyze and reverse-engin...
Attackers can access victims’ personal and group conversations, photos, videos, shared files, contact list and more.
Every key market on the globe suffers from a lack of women in the workforce, severe wage gaps and a dearth of female executives.
This blog has promoted control flow integrity (CFI) as a game changing security mitigation and encouraged its use. We wanted to take our own security advice and start securing software we use. To that end, we decided to apply CFI to facebook’s osquery, a cross-platform codebase with which we are dee...
Accounts belonging to BBC, Amnesty and security expert Graham Cluley among those used to send pro-Turkey messages
Cyber-criminals are stealing from their peers in the latest ransomware family example, dubbed PetrWrap.
I recently had the privilege of giving a keynote at BSidesLisbon. I had a great time at the conference, and I’d like to thank Bruno Morisson for inviting me. If you’re into port, this is the conference for you! I recommend that anyone in the area consider attending next year. I felt there was a […]
The two-and-a-half-year-old data breach is ultimately going to cost the DIY purveyor as much as $179 million, possibly much more.
About 35% of the leaked LinkedIn passwords were already known from previous password dictionaries.
In my first blog post, I introduced the general structure of Binary Ninja’s Low Level IL (LLIL), as well as how to traverse and manipulate it with the Python API. Now, we’ll do something a little more interesting. Reverse engineering binaries compiled from object-oriented languages can be challengin...
Russian hacking of US election could happen here, spy agency boss warns UK politicians
There are roughly 3,700 DDoS attacks per day.
Discovery by Palo Alto researchers appears to suggest ransomware authors have shifted tactics from financial to political motivation
From the highest levels of organized crime to burglary, criminals are using technology more than ever, Europol report warns
The majority of the exploitation attempts of the bug seem to be leveraging a publicly released proof of concept (PoC).
33% paid the ransom and recovered their data, 54% refused to pay but recovered their data anyway.
Confide - popular with White House aides - could have leaked sensitive user information
RansomWorm spreads inside throughout the entire network to encrypt every server and computer—and the backups.