> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Barracuda has addressed two severe vulnerabilities in their ESG and other products that could allow remote root access if exploited together. Meanwhile, CISA has confirmed active exploitation of a WordPress Core flaw during software upgrades, urging immediate attention. Mozilla is delaying Firefox patches to prevent AI from exploiting a known vulnerability. In the IoT space, 1.3 million Android TV boxes have been compromised by their manufacturer to function as residential proxies through a botnet. Additionally, an authentication flaw in Node-RED is being exploited in the wild, underscoring the importance of timely patching. Lastly, AI-generated malware continues to evolve, raising concerns about its potential impact.
|
// AI-powered summary generated at 08:00
Researcher reveals forensic trace on iOS
MySpace, LinkedIn hacker is back, but log-ins could be a few years' old
No doubt, DARPA’s Cyber Grand Challenge (CGC) will go down in history for advancing the state of the art in a variety of fields: symbolic execution, binary translation, and dynamic instrumentation, to name a few. But there is one contribution that we believe has been overlooked so far, and that may...
The attackers used the commandeered website to tweet that the hack was “for Brazil," a country without official access to Pokémon Go.
The new company brings together NTT's advanced analytics technologies, threat intelligence and security experts.
tl;dr While the internet went crazy today, we went fact finding. Here are our notes on Pokemon Go’s permissions to your Google account. Here’s what Jay and I set out to do at around 6pm today: Find what permissions Pokemon Go is actually requesting Investigate what the permissions actually do Replic...
Kremlin claims hackers targeted 20 key organizations
After guessing a registrant’s email address, an attacker can log in as that person, post messages, track movements and more.
tl;dr – Tidas is now open source. Let us know if your company wants help trying it out. When Apple quietly released the Secure Enclave Crypto API in iOS 9 (kSecAttrTokenIDSecureEnclave), it allowed developers to liberate their users from the annoyance of strong passwords or OAuth. That is, if the de...
One source said that personal data of some 411,000 passengers had been lifted as well.
Government not trusted with its citizens’ data
Fresh hope for victims of Chimera malware
AdGholas carefully targeted malicious ads and filtered impressions based on the victim’s language settings, time zone and even PC brand.
Site offers the first 'all in one' criminal service of its kind
Nexusguard points to growing hacktivist threat
Malicious mails were up 230% quarter-over-quarter, with campaigns peaking at hundreds of millions of messages per day.
Pretty much anyone now can make a key that unlocks your luggage.
Aerial vehicles must be regulated and QA tested
Operator claims it wasn’t breached
The Democratic National Committee (DNC) chairwoman Debbie Wasserman Schultz has announced she is to step down from her post following the extensive email leak of some 19,000 messages from Democratic party officials.