> TODAY'S SUMMARY (42 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The 3AM ransomware attack on a UK school utilized a human-AI hybrid approach, resulting in the exfiltration of sensitive financial data. Meanwhile, a cyberattack on French plasma storage facilities attempted to compromise cold-room controls, although safeguards prevented loss. Notably, Binance detailed a massive $6.43 billion theft stemming from a sophisticated multi-pronged attack involving fake job interviews and AI tool abuse. Additionally, the cPGuard update was compromised, affecting nearly 3,000 web hosting servers in a supply chain attack. Lastly, CISA has added a critical flaw in WordPress to its Known Exploited Vulnerabilities catalog, indicating ongoing exploitation risks.
|
// AI-powered summary generated at 12:00
New tools designed to help developers confound popular attacks
Talos identified several spear phishing campaigns which are used to distribute the GozNym malware.
Today, Facebook announced the successful completion of our work: osquery for Windows. “Today, we’re excited to announce the availability of an osquery developer kit for Windows so security teams can build customized solutions for their Windows networks… This port of osquery to Windows gives you the...
The attack is making use of the RIG exploit kit to drop the CrypMIC ransomware.
Trend Micro research claims sensitive messages can be spoofed and read
Between the city’s size and the wide spectrum of the security industry, it’s easy to feel lost. Where are ‘your people?’ How can you find talks that interest you? You want to spend your time meeting and networking, not researching your options. So, we put together a directory of all of the infosec g...
Flaw in latest iPhone and iPad software could make it easier for hackers to access sensitive information
Targeting Russian banks, it shows advanced capabilities like keylogging, spying, smartcard reading etc.
The scan appeared on a site with suspected ties to Russia, DCLeaks.com.
Website of security researcher and blogger Brian Krebs offline after huge DDoS attack
The breaches impacting the global 1,000 companies the most were heists at LinkedIn and Adobe.
More than half (53%) of global IT professionals confuse “erasing” data with “deleting” data.
One of the biggest DDoS attacks ever recorded targeted security researcher and blogger Brian Krebs
Social media and BYOD are still causing IT security headaches
Researchers find a way to apply the brakes
ISF defines a structured, methodical process for determining the approaches required to protect mission-critical information assets.
The ecosystem remains woefully insecure due to users’ failure to follow best practices.
Former Home Secretary Lord David Blunkett launched The Cyber Highway which offers a new, unique and user-friendly online portal for large enterprises seeking to sure up the cyber defense of their supply chain
Lloyds report highlights low boardroom awareness
The Russian APT group leaked medical data stolen from the World Anti-Doping Agency (WADA) for Nadal, Rose, Farah and others.