> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
They took 59,000 research files on the use of tritium, also known as Hydrogen-3, which is a key component of hydrogen bombs.
Veracode study claims 60% of apps fail security on first scan
Our previous blog posts often mentioned control flow integrity, or CFI, but we have never explained what CFI is, how to use it, or why you should care. It’s time to remedy the situation! In this blog post, we’ll explain, at a high level, what CFI is, what it does, what it doesn’t do, and […]
Thieves supplement cyber attacks with old-fashioned brute force
GlobalSign accidentally revoked cross certificate, causing downstream chaos
Last month our Cyber Reasoning System (CRS) -developed for DARPA’s Cyber Grand Challenge– audited a much larger amount of code in less time, in greater detail, and at a lower cost than a human could. Our CRS audited zlib for the Mozilla Secure Open Source (SOS) Fund. To our knowledge, this is the fi...
Report claims lenders are trying to protect image by staying mum
Pornographic image uploaded to site as campaign chief’s Twitter account is hacked
Today, Facebook announced the successful completion of our work: osquery for Windows. “Today, we’re excited to announce the availability of an osquery developer kit for Windows so security teams can build customized solutions for their Windows networks… This port of osquery to Windows gives you the...
Researcher finds malicious JavaScript stealing card info from e-commerce sites
The overall spend on security hardware, software and services will increase an impressive 38% by 2020.
Between the city’s size and the wide spectrum of the security industry, it’s easy to feel lost. Where are ‘your people?’ How can you find talks that interest you? You want to spend your time meeting and networking, not researching your options. So, we put together a directory of all of the infosec g...
Any conversation can be configured to delete sent and received messages after a specified interval.
Russia again suspected as investigation widens
Bespoke malware lifted card data from 122 stores and 44 outlets.
The G-7 released the Fundamental Elements of Cybersecurity for the Financial Sector this week, which are guidelines for protecting the global financial sector from cyberattacks.
25% lack automatic secure connections, and many are open to POODLE attacks, despite increased spending.
Eko subjects users to unwanted advertisements, and can spy on users, collecting their personal data.
Pindrop will analyze calls and provide a risk score for staff
Attack caused ‘disruption’ at unnamed facility