> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
Valentine’s Day break-up on the cards for insecure algorithm
Protecting yourself from CEO fraud comes down to understanding how an attack works
We’ve mentioned GRR before – it’s our high-speed, full-system emulator used to fuzz program binaries. We developed GRR for DARPA’s Cyber Grand Challenge (CGC), and now we’re releasing it as an open-source project! Go check it out. Fear GRR Bugs aren’t afraid of slow fuzzers, and that’s why GRR was d...
More than 80% of operators said they are experiencing SIM box fraud, draining revenue.
Attackers compromised Twitter Counter to post messages
Après 5 années, force est de constater que la fréquence des articles sur ce blog s’allonge, alors même que l’actualité s’emballe, et accapare le temps des auteurs.
Pour cette raison, ce blog est mis en sommeil, tout en restant ouvert [...] Lire la suite
CEO confirms incident last week
The offensive is capable of taking down networks. In fact, an average laptop can produce about a 180Mbps DDoS attack.
We’re putting our money where our mouth is again. In continued support for New York’s growing infosec community we’re excited to sponsor the upcoming O’Reilly Security Conference. We expect to be an outlier there: we’re the only sponsor that offers consulting and custom engineering rather than just...
The program offers up to $15,000 for vulnerabilities found in the Qualcomm Snapdragon family of mobile processors.
The flaw makes phones vulnerable to man-in-the-middle attacks, allowing arbitrary commands as a privileged user.
Our previous blog posts often mentioned control flow integrity, or CFI, but we have never explained what CFI is, how to use it, or why you should care. It’s time to remedy the situation! In this blog post, we’ll explain, at a high level, what CFI is, what it does, what it doesn’t do, and […]
UK operator under fire after men intercept upgrade devices
Move to the cloud creates a lack of clear ownership and responsibility for various mission-critical IT functions.
Authentication uses more than 500 points of behavior such as hand-eye coordination, pressure, hand tremors and scrolling.
Malware racked up false virtual in-game currency that they exchanged on the black market for US dollars.
Controversial Investigatory Powers Bill will become law
A third of US consumers put the value of their online life at somewhere between $100,000 to priceless.
New variant finds real evidence of wrongdoing to nail victims
Speaking at ISSE Conference 2016 in Paris, Emily Orton, director of Darktrace, argued that traditional security approaches alone are simply now not enough to defend against evolving cyber-threats, instead advocating the use of machine-based learning to aid in the battle against cybercrime