> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A US government IT worker pleaded guilty to leaking Top Secret files, underscoring insider threats. A phishing campaign leveraging Google Calendar invites has emerged, successfully bypassing multi-factor authentication (MFA). Additionally, Russian hackers, linked to APT29, are exploiting n-day vulnerabilities in iOS and Android devices through compromised websites. There are warnings about unpatched vulnerabilities in SonicWall's end-of-life software, and a significant cyberattack has disrupted the French blood service's temperature controls. Finally, a major security flaw in WordPress has been actively exploited, prompting alerts from CISA. Organizations should prioritize patching vulnerabilities and enhancing employee training to mitigate risks.
|
// AI-powered summary generated at 16:00
Royal and Sun Alliance (RSA) has been fined £150,000 by the Information Commissioner’s Office following the loss of personal information relating to 59,592 customers
Move seems to validate last year’s report on widespread bugs but doesn’t fix larger problems
John Oliver may have written off 2016, but we’re darn proud of all that we accomplished and contributed this year. We released a slew of the security tools that help us -and you- work smarter, and promoted a few more that deserved recognition. We helped the New York City InfoSec community build a fo...
The ransom note features Robot Santa Claus from the TV show Futurama.
Joint Committee asks experts to pen written submissions
We’re back with our promised second installment discussing control flow integrity. This time, we will talk about Microsoft’s implementation of control flow integrity. As a reminder, control flow integrity, or CFI, is an exploit mitigation technique that prevents bugs from turning into exploits. For...
Gaming forum users in line for follow up scams after 1.5m details compromised
“Insurers and regulators alone cannot stop foreign government assisted cyber-attacks,” said Insurance Commissioner Dave Jones.
I think you’ll agree when I say: there’s no VPN option on the market designed with equal emphasis on security and ease of use. That changes now. Today we’re introducing Algo, a self-hosted personal VPN server designed for ease of deployment and security. Algo automatically deploys an on-demand VPN s...
After actors gain access to cloud infrastructure, new methods of persistence will be established via management profiles.
Services giant predicts attacks will get smarter and more targeted
Insider threat laid bare after informatics director accepted bribes
Three out of the top five impediments to cybersecurity framework implementation are technological in nature.
Met detectives being trained to hunt for digital clues
Aviva claims more than 20 million have been targeted in the past
The program has launched for Bugcrowd’s curated community of tens of thousands of skilled cybersecurity researchers.
Typically, the affected TVs will be locked, and a ransom message pops up asking for 10,000 yen (around $100) to be paid within 72 hours.
New variant offers decryption key if they read two articles
Reports are now available to the public on the state website; previously, those reports could only be accessed by a public records request.
Argus partners with Elektrobit (EB) to address automotive electronic control units, and has integrated Qualcomm Snapdragon.