> TODAY'S SUMMARY (2 articles)
A significant vulnerability in Node-RED, a flow-based programming tool developed by Siemens, is being actively exploited by attackers due to many users failing to apply available patches. This highlights the ongoing issue of unpatched software vulnerabilities serving as entry points for cybercriminals. Organizations are urged to prioritize timely updates and vulnerability management to mitigate risks. Additionally, general cyber threat trends continue to evolve, with attackers increasingly targeting unmaintained software and leveraging known exploits. Cybersecurity awareness and proactive measures remain essential in protecting against these persistent threats.
|
// AI-powered summary generated at 04:00
The North Atlantic Trade Organization (NATO) has officially declared that cyberspace is a domain for war, placing it alongside the traditional battlegrounds of land, sea and air.
Spearphishing is the primary method of attack, with the number of attacks increasing by 160% from FY 2014 to FY 2015.
Using Vector35’s Binary Ninja, a promising new interactive static analysis and reverse engineering platform, I wrote a script that generated “exploits” for 2,000 unique binaries in this year’s DEFCON CTF qualifying round. If you’re wondering how to remain competitive in a post-DARPA DEFCON CTF, I hi...
A survey reveals that half of IT professionals update applications only once every one to six months.
The Online Trust Alliance (OTA) has named the social media site as the best consumer-facing website for personal information protection.
In the year since we started this bi-monthly meetup, we’ve been thrilled by the community that it has attracted. We’ve had some excellent presentations on pragmatic security research, shared our aspirations and annoyances with our work, and made some new friends. It’s a wonderful foundation for an e...
The FBI is warning businesses to be on guard for an email scam that it says has cost companies billions of dollars over the last two and a half years.
Hackers allegedly working on behalf of the Russian government broke into computers belonging to the Democratic National Committee (DNC) and accessed information relating to presidential candidate Donald Trump.
Google’s Protocol Buffers (protobuf) is a common method of serializing data, typically found in distributed applications. Protobufs simplify the generally error-prone task of parsing binary data by letting a developer define the type of data, and letting a protobuf compiler (protoc) generate all the...
The Android police trojan accuses potential victims of crimes they didn’t commit, then demands $200 worth of iTunes gift cards.
Two or more apps can carry out harmful activity together using inter-app communications in a collaborative fashion.
The majority (85%) of board members believe that IT and security executives need to improve the way they report.
Membership details of over 50 million users of defunct file-sharing service iMesh are for sale online
The Irish police force An Garda SĂochána has announced that it will set up specialist units to liaise with international partners on current and emerging threats, and to provide cyber and forensic tools to support front line policing and state security.
The fast-food chain has found a new malware variant and more compromised stores.
72% of organizations are not confident in their ability to manage and control employee access to confidential documents and files.
Three-quarters of CSOs and network directors (74%) have been victims of DNS attacks, yet many have no DNS security beyond a firewall.
New research reveals rapid adoption of intelligent machines, but also highlights concerns over the security issues that they bring.
Symantec has announced plans to acquire Blue Coat Systems for a price of $4.65 billion.
The exploit is for a Local Privilege Escalation (LPE) vulnerability in Windows that is key to the infection process and to APTs.