> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
Andrew Parker claims Kremlin is on the offensive
Google Brain has shown that artificial intelligence has the ability to create its own cryptography standard, dynamically.
Après 5 années, force est de constater que la fréquence des articles sur ce blog s’allonge, alors même que l’actualité s’emballe, et accapare le temps des auteurs.
Pour cette raison, ce blog est mis en sommeil, tout en restant ouvert [...] Lire la suite
Microsoft hasn't patched the Windows flaw—a local privilege escalation that can be used as a security sandbox escape.
The effort is related to ongoing Operation Lotus Blossom attack campaigns in the Asia Pacific region.
We’re putting our money where our mouth is again. In continued support for New York’s growing infosec community we’re excited to sponsor the upcoming O’Reilly Security Conference. We expect to be an outlier there: we’re the only sponsor that offers consulting and custom engineering rather than just...
Chancellor Philip Hammond has launched the new UK cybersecurity strategy, built on developing future talent, protecting what we have and identifying the malicious few.
Anomali survey finds organizations are suffering from data overload
Our previous blog posts often mentioned control flow integrity, or CFI, but we have never explained what CFI is, how to use it, or why you should care. It’s time to remedy the situation! In this blog post, we’ll explain, at a high level, what CFI is, what it does, what it doesn’t do, and […]
Patients transferred after IT systems are shut down
The Apple iOS environment is riddled with malicious fake apps, signed with enterprise certificates.
Last month our Cyber Reasoning System (CRS) -developed for DARPA’s Cyber Grand Challenge– audited a much larger amount of code in less time, in greater detail, and at a lower cost than a human could. Our CRS audited zlib for the Mozilla Secure Open Source (SOS) Fund. To our knowledge, this is the fi...
SafeHaven, a system for granular control of IoT devices in smart homes, has won Trusted Execution Environment (TEE) hackathon.
The Cyberbit Range provides lifelike simulation for security operations trainees—kind of like the holodeck, in Star Trek.
Today, Facebook announced the successful completion of our work: osquery for Windows. “Today, we’re excited to announce the availability of an osquery developer kit for Windows so security teams can build customized solutions for their Windows networks… This port of osquery to Windows gives you the...
The Australian online site for the iconic sneaker brand was compromised for more than a month.
58% of participants under 30 believed that a technology-based terrorist threat was imminent.
Bug could allow hackers to physically control equipment
CT is designed to help prevent abuse of SSL cert system
The most common type of attack that consumers fall victim to are false requests to reset social media account passwords.