> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
Kremlin-linked group quick to use US elections to spear phish targets
Several others are on the malware’s hit list
We’ve mentioned GRR before – it’s our high-speed, full-system emulator used to fuzz program binaries. We developed GRR for DARPA’s Cyber Grand Challenge (CGC), and now we’re releasing it as an open-source project! Go check it out. Fear GRR Bugs aren’t afraid of slow fuzzers, and that’s why GRR was d...
13th annual NYU Cybersecurity Awareness Week (CSAW) games kick off in Brooklyn.
European Cyber Security Challenge runs all this week
Après 5 années, force est de constater que la fréquence des articles sur ce blog s’allonge, alors même que l’actualité s’emballe, et accapare le temps des auteurs.
Pour cette raison, ce blog est mis en sommeil, tout en restant ouvert [...] Lire la suite
SEC filing reveals firm knew about state-sponsored hacker in 2014
PlayStation gamers have taken in droves to report that they have had their accounts hacked.
We’re putting our money where our mouth is again. In continued support for New York’s growing infosec community we’re excited to sponsor the upcoming O’Reilly Security Conference. We expect to be an outlier there: we’re the only sponsor that offers consulting and custom engineering rather than just...
Chrome, Firefox and Safari will display 'deceptive' warnings for sites that spread malware, unwanted software or phishing.
Firewalls, email filtering, anti-malware and security training also failed in large percentages.
Our previous blog posts often mentioned control flow integrity, or CFI, but we have never explained what CFI is, how to use it, or why you should care. It’s time to remedy the situation! In this blog post, we’ll explain, at a high level, what CFI is, what it does, what it doesn’t do, and […]
Workshop this week aimed to bolster co-operation
"We are using pencil and paper like the old days.”
Synopsys has announced the double acquisition of Cigital and Codiscope
Open sourced malware has split into less potent entities, say researchers
A new approach to LinkedIn scamming looks to steal confidential information with a combo of legit links and a plausible message.
Tesco Bank has confirmed that some of its customers’ current accounts have been subject to online criminal activity, in some cases resulting in money being withdrawn fraudulently
Attackers would need direct access to Sequoia box
Now it’s time for firms to accelerate compliance plans