> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A US government IT worker pleaded guilty to leaking Top Secret files, underscoring insider threats. A phishing campaign leveraging Google Calendar invites has emerged, successfully bypassing multi-factor authentication (MFA). Additionally, Russian hackers, linked to APT29, are exploiting n-day vulnerabilities in iOS and Android devices through compromised websites. There are warnings about unpatched vulnerabilities in SonicWall's end-of-life software, and a significant cyberattack has disrupted the French blood service's temperature controls. Finally, a major security flaw in WordPress has been actively exploited, prompting alerts from CISA. Organizations should prioritize patching vulnerabilities and enhancing employee training to mitigate risks.
|
// AI-powered summary generated at 16:00
Data sharing agreement not in jeopardy, European Commission assures
Proposed legislation calls for new industry standards
John Oliver may have written off 2016, but we’re darn proud of all that we accomplished and contributed this year. We released a slew of the security tools that help us -and you- work smarter, and promoted a few more that deserved recognition. We helped the New York City InfoSec community build a fo...
The telecom authority said that Shamoon 2 is behind new attacks on the labor ministry and a chemicals firm.
68.2% of breached records came from the US.
We’re back with our promised second installment discussing control flow integrity. This time, we will talk about Microsoft’s implementation of control flow integrity. As a reminder, control flow integrity, or CFI, is an exploit mitigation technique that prevents bugs from turning into exploits. For...
Eastern Europeans part of a suspected international gang
A member of Kaspersky Lab’s cybercrime investigations team has been arrested on suspicion of treason
Helps black hats spot ‘dishonest’ rivals
Stats likely to represent just the tip of the iceberg
An espionage trojan called SpyNote RAT has been found masquerading as the popular Netflix app, to trick Android users.
A vulnerability in the software it uses to run its forums allowed hackers to access forum user information.
76% of data security pros believe in the maturity of their data security strategy, but 93% report persistent technical challenges.
Citrix claims 40% have experienced ‘bluff’ ransomware, with many paying up
Report claims 94% of websites experienced an attack over a three-month period
World’s biggest money services firm admits flawed corporate culture
The new variant of the HummingBad malware has been found hiding in more than 20 apps on Google Play.
GCHQ director Robert Hannigan has resigned his position, citing personal reasons.
The number of people defrauded in the UK by online dating scams reached an all-time high in 2016
Insidiously, the location bar looks legit: accounts.google.com