> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
Eset claims related malware has hit a new high
Another potential showdown looming with Apple
Last month our Cyber Reasoning System (CRS) -developed for DARPA’s Cyber Grand Challenge– audited a much larger amount of code in less time, in greater detail, and at a lower cost than a human could. Our CRS audited zlib for the Mozilla Secure Open Source (SOS) Fund. To our knowledge, this is the fi...
Washington on the offensive after string of attacks
Two teens in the group that hacked World of Warcraft, among other targets, have been arrested.
Today, Facebook announced the successful completion of our work: osquery for Windows. “Today, we’re excited to announce the availability of an osquery developer kit for Windows so security teams can build customized solutions for their Windows networks… This port of osquery to Windows gives you the...
Meeting continues to be a major draw for hackers
Nearly 65% of cyber professionals struggle to define their career paths—leading to a high turnover rate that opens up big security holes.
Between the city’s size and the wide spectrum of the security industry, it’s easy to feel lost. Where are ‘your people?’ How can you find talks that interest you? You want to spend your time meeting and networking, not researching your options. So, we put together a directory of all of the infosec g...
Call center staff duped US consumers by impersonating IRS
Trend Micro report claims many are failing on best practice security
Privacy watchdog gets tough after basic security failings exposed user data
An apparent malvertising attack is pushing malware-laden pop-ups for unsuspecting users of the free desktop app.
Professor Nick Bostrom explores whether it's possible for AI to become super intelligent and still be under our control
Provider allegedly built custom program to find incoming data in real-time
Card giant’s Identity Check Mobile tech should make secure authentication easier
It searches and extracts cookies and authentication credentials, and scavenges info saved by Point of Sale (PoS) systems.
Redmond seeks to influence governments for ‘the good of the cloud’
Honeypot set-up sees DVR successfully attacked several times an hour
This tactic is designed to extract critical data from its victims in real time via a live, interactive phishing attack.