> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Barracuda has addressed two severe vulnerabilities in their ESG and other products that could allow remote root access if exploited together. Meanwhile, CISA has confirmed active exploitation of a WordPress Core flaw during software upgrades, urging immediate attention. Mozilla is delaying Firefox patches to prevent AI from exploiting a known vulnerability. In the IoT space, 1.3 million Android TV boxes have been compromised by their manufacturer to function as residential proxies through a botnet. Additionally, an authentication flaw in Node-RED is being exploited in the wild, underscoring the importance of timely patching. Lastly, AI-generated malware continues to evolve, raising concerns about its potential impact.
|
// AI-powered summary generated at 08:00
Ubuntu developer Canonical has confirmed that a data breach exposed personal information of two million forum users
US government wanted to access data stored in Ireland
tl;dr While the internet went crazy today, we went fact finding. Here are our notes on Pokemon Go’s permissions to your Google account. Here’s what Jay and I set out to do at around 6pm today: Find what permissions Pokemon Go is actually requesting Investigate what the permissions actually do Replic...
F-Secure report compares customer experience
20% of businesses have never changed their default passwords on privileged accounts, and 30% allow accounts and passwords to be shared.
tl;dr – Tidas is now open source. Let us know if your company wants help trying it out. When Apple quietly released the Secure Enclave Crypto API in iOS 9 (kSecAttrTokenIDSecureEnclave), it allowed developers to liberate their users from the annoyance of strong passwords or OAuth. That is, if the de...
An investigation by Akamai SIRT revealed that close to 43% of attack vectors leveraged included DDoS reflection and amplification.
The security and cloud balance is less of an issue now, as security becomes a boardroom issue.
Gloves Goggles Checkered body suits The representation of hackers in stock media spans a narrow band of reality between the laughable and the absurd. It overshadows the fact that lots of hackers are security professionals. They may dress differently, but they serve a critical function in the economy...
Eset warns users: ‘if it’s too good to be true it usually is’
SentinelOne spots new threat on Dark Web
Il y a deux ans un collègue allemand me recommandait l’ouvrage Black Out de Mark Elsberg, à l’époque disponible uniquement en Allemand. Je l’avais acheté en audio book pour pratiquer mon allemand dans le TGV, ce qui était très optimiste [...] Lire la suite
cuteRansomware launches from Google Docs to host the decryption key and command-and-control functionality.
Su Bin admitted to helping his homeland make off with blueprints for Pentagon military jet components—for profit only, he said.
The legislation makes online sexual extortion a federal crime, defined as the use of extortion and threats to coerce sexual activity.
Yet another local authority in data breach blunder
Malware collected payment card information, including cardholder name, credit/debit card number, security code and expiration date.
Similar to CryptoLocker in functionality, Stampado will delete a random file from the victim’s PC every six hours until the ransom is paid.
Capgemini claims consumer goods firms need to tighten security and privacy
Software maker releases fixes for 80+ bugs