> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A US government IT worker pleaded guilty to leaking Top Secret files, underscoring insider threats. A phishing campaign leveraging Google Calendar invites has emerged, successfully bypassing multi-factor authentication (MFA). Additionally, Russian hackers, linked to APT29, are exploiting n-day vulnerabilities in iOS and Android devices through compromised websites. There are warnings about unpatched vulnerabilities in SonicWall's end-of-life software, and a significant cyberattack has disrupted the French blood service's temperature controls. Finally, a major security flaw in WordPress has been actively exploited, prompting alerts from CISA. Organizations should prioritize patching vulnerabilities and enhancing employee training to mitigate risks.
|
// AI-powered summary generated at 16:00
NCSC boss warns of ‘step change’ in Russian aggression
Infamous Lazarus Group linked to attacks
Hi, I’m Josh. I recently joined the team at Trail of Bits, and I’ve been an evangelist and plugin writer for the Binary Ninja reversing platform for a while now. I’ve developed plugins that make reversing easier and extended Binary Ninja’s architecture support to assist in playing the microcorruptio...
Owned by two UK citizens, Y-Internet sold illegal IPTV with annual contracts to hotels, pubs, neighborhoods and individuals.
Many enterprises are overly exposing their AD administrator’s credentials.
John Oliver may have written off 2016, but we’re darn proud of all that we accomplished and contributed this year. We released a slew of the security tools that help us -and you- work smarter, and promoted a few more that deserved recognition. We helped the New York City InfoSec community build a fo...
The event involved malicious software installed on payment card systems at hundreds of its corporate-owned restaurant locations across the US.
Phishers try to socially engineer concerned netizens
Retail giant reportedly spilled employee details last September
Most believe they’ll be targeted over coming year, says BAE Systems
These targeted attacks use only legitimate software and target banks, telecoms and government organizations.
Only 33% have no found vulnerabilities, showing significant needed improvement on enterprise security.
Sophos has announced the intention to acquire Invincea and add machine learning-based predictive malware detection to its portfolio
Proofpoint report highlights growing menace of angler phishing
Sentry MBA is a tool that allows the user to login to websites, using a non-traditional form of brute force
The sector's own financial regulator was ironically the original source of the compromise.
But Microsoft claims UK users are most insulated in the world
Even well-funded firms still too reactive with security, according to Deloitte
The overlapping infrastructure is a reminder of how malware support and distribution is frequently reused.
Popular open source framework gets a hardware bridge