> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A US government IT worker pleaded guilty to leaking Top Secret files, underscoring insider threats. A phishing campaign leveraging Google Calendar invites has emerged, successfully bypassing multi-factor authentication (MFA). Additionally, Russian hackers, linked to APT29, are exploiting n-day vulnerabilities in iOS and Android devices through compromised websites. There are warnings about unpatched vulnerabilities in SonicWall's end-of-life software, and a significant cyberattack has disrupted the French blood service's temperature controls. Finally, a major security flaw in WordPress has been actively exploited, prompting alerts from CISA. Organizations should prioritize patching vulnerabilities and enhancing employee training to mitigate risks.
|
// AI-powered summary generated at 16:00
Necurs is not only a spambot, it is a modular piece of malware that can add new capabilities at any time.
More than a third of firms have experienced some information loss, theft or attack via email within the past two years.
This blog has promoted control flow integrity (CFI) as a game changing security mitigation and encouraged its use. We wanted to take our own security advice and start securing software we use. To that end, we decided to apply CFI to facebook’s osquery, a cross-platform codebase with which we are dee...
Defence minister says cyber troops are spreading propaganda
A full 81% say they can identify and take valuable data with 24 hours.
I recently had the privilege of giving a keynote at BSidesLisbon. I had a great time at the conference, and I’d like to thank Bruno Morisson for inviting me. If you’re into port, this is the conference for you! I recommend that anyone in the area consider attending next year. I felt there was a […]
The data is being sold for a mere $300 on the Tochka marketplace.
Victims of medical identity theft had to pay approximately $2,500 in out-of-pocket costs per incident, on average.
In my first blog post, I introduced the general structure of Binary Ninja’s Low Level IL (LLIL), as well as how to traverse and manipulate it with the Python API. Now, we’ll do something a little more interesting. Reverse engineering binaries compiled from object-oriented languages can be challengin...
Most Americans are not worried about tax fraud in spite of federal reports of 787,000 confirmed identity theft returns in 2016.
Understanding user behaviors and intent as they interact with critical business data is a key to greater security, but tools can’t keep up across clouds, devices and user locations.
Hi, I’m Josh. I recently joined the team at Trail of Bits, and I’ve been an evangelist and plugin writer for the Binary Ninja reversing platform for a while now. I’ve developed plugins that make reversing easier and extended Binary Ninja’s architecture support to assist in playing the microcorruptio...
Tim Wilson, CISO at Optum International, discusses how cyber-criminals piece together partial sources of information to construct an individual’s identity and form the basis of an attack
Vovnenko will go away for 41 months for operating a 13K-strong botnet to steal credentials and financial information.
Global study shows new laws and regulations are also worrying firms
Some of the victims are high-profile industrial, research or diplomatic targets.
There is large-scale eavesdropping on sensitive conversations via remotely controlled PC microphones.
CSA+ will offer validation of skills required to use cyber-threat detection tools and perform data analysis.
Eset report urges victims not to pay up
Business used proxy servers and botnets to stay hidden