> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A US government IT worker pleaded guilty to leaking Top Secret files, underscoring insider threats. A phishing campaign leveraging Google Calendar invites has emerged, successfully bypassing multi-factor authentication (MFA). Additionally, Russian hackers, linked to APT29, are exploiting n-day vulnerabilities in iOS and Android devices through compromised websites. There are warnings about unpatched vulnerabilities in SonicWall's end-of-life software, and a significant cyberattack has disrupted the French blood service's temperature controls. Finally, a major security flaw in WordPress has been actively exploited, prompting alerts from CISA. Organizations should prioritize patching vulnerabilities and enhancing employee training to mitigate risks.
|
// AI-powered summary generated at 16:00
River City Media used huge database to send over one billion spam emails every day, researchers discover
It can be used by businesses to measure the privacy and security of products, apps and services.
This blog has promoted control flow integrity (CFI) as a game changing security mitigation and encouraged its use. We wanted to take our own security advice and start securing software we use. To that end, we decided to apply CFI to facebook’s osquery, a cross-platform codebase with which we are dee...
The public launch comes after paying out $85K+ in private bounties in the last 9 months.
In the wake of high-profile open-source flaws like Heartbleed and Poodle, there’s an awareness that most of the tools and technology that we use every day run on open-source platforms.
I recently had the privilege of giving a keynote at BSidesLisbon. I had a great time at the conference, and I’d like to thank Bruno Morisson for inviting me. If you’re into port, this is the conference for you! I recommend that anyone in the area consider attending next year. I felt there was a […]
The accounts include names, emails and plain text passwords harvested from a variety of infamous data breaches
Gartner claims that despite low take up, GDPR compliance is not a lost cause
In my first blog post, I introduced the general structure of Binary Ninja’s Low Level IL (LLIL), as well as how to traverse and manipulate it with the Python API. Now, we’ll do something a little more interesting. Reverse engineering binaries compiled from object-oriented languages can be challengin...
Nurse Elaine Lewis was dismissed from role after admitting breaching the Data Protection Act
Kaspersky Lab research suggests companies blame competitors for DDoS attacks rather than disgruntled employees or political activists
Hi, I’m Josh. I recently joined the team at Trail of Bits, and I’ve been an evangelist and plugin writer for the Binary Ninja reversing platform for a while now. I’ve developed plugins that make reversing easier and extended Binary Ninja’s architecture support to assist in playing the microcorruptio...
Webmail account was even hacked last year
News appeared on Thursday 2 March that Howard Schmidt had passed away following a long battle with cancer
Shenzhen-based DBL Technology patched but did not fix issue
Major sites were affected for hours on Tuesday
Researchers from Fidelis Cybersecurity have unearthed an “interesting security issue” involving the popular messaging app Telegram
IOActive reveals security vulnerabilities in multiple systems
The Institute of Information Security Professionals (IISP) has officially applied to the privy council for a Royal Charter
Attackers suspected of being part of a much larger operation