> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
We’re putting our money where our mouth is again. In continued support for New York’s growing infosec community we’re excited to sponsor the upcoming O’Reilly Security Conference. We expect to be an outlier there: we’re the only sponsor that offers consulting and custom engineering rather than just...
Report from hired consultancy used in St Jude Medical court case
Its use of SugarSync demonstrates the effective use of cloud services for hosting malware by malicious threat actors.
Our previous blog posts often mentioned control flow integrity, or CFI, but we have never explained what CFI is, how to use it, or why you should care. It’s time to remedy the situation! In this blog post, we’ll explain, at a high level, what CFI is, what it does, what it doesn’t do, and […]
Yevgeniy Nikulin is currently under arrest in Prague
66% of respondents faced increased security risks due to this workforce shortage.
Last month our Cyber Reasoning System (CRS) -developed for DARPA’s Cyber Grand Challenge– audited a much larger amount of code in less time, in greater detail, and at a lower cost than a human could. Our CRS audited zlib for the Mozilla Secure Open Source (SOS) Fund. To our knowledge, this is the fi...
The Crowdsourced Security Initiative will be a full-scale launch following the successful Hack the Pentagon pilot program.
The DDoS attack targeted New Hampshire-based company Dyn and its managed DNS infrastructure.
Today, Facebook announced the successful completion of our work: osquery for Windows. “Today, we’re excited to announce the availability of an osquery developer kit for Windows so security teams can build customized solutions for their Windows networks… This port of osquery to Windows gives you the...
USSS IT set-up lacks leadership, audit claims
New approach features 'high fidelity' machine learning for extra accuracy
The Shellphish team is the same team that won bronze at the DARPA-sponsored Cyber Grand Challenge over the summer.
Millions of Apple iOS mobile devices are leaking information like the exact location of devices and their owners.
The Kremlin-tied group has created legions of custom programs, backdoors, bootkits and rootkits to assist it in its spying.
Republican candidate’s corporate servers are wide open, says researchers
Eset research finds numerous vulnerabilities
Side channel issue may increase potency of cyberattacks
At the (ISC)2 Congress in Dublin, Ireland, on October 19, security analyst Megha Sharma presented her research and risk assessment of the three key areas in a smart city
TrickBot shares much in common with the Dyre malware, which became notorious in late 2014 and early 2015.