> TODAY'S SUMMARY (47 articles)
Today's cybersecurity landscape highlights a growing concern over AI-driven threats. The UK's National Cyber Security Centre (NCSC) warns that AI-powered attacks, particularly in ransomware, could target critical infrastructure by 2028, as legacy systems remain vulnerable. Meanwhile, a significant breach at Revolve has compromised the card details of up to 1.5 million customers, and a data breach at Harvard University has exposed 851,000 accounts. On the botnet front, Google has dismantled the XCPE botnet, which leveraged over 1.3 million devices for malicious activities. Additionally, ongoing exploitation of critical vulnerabilities, such as those in Siemens IoT devices and CryptoPayment Gateway plugins, underscores the urgent need for robust cybersecurity measures. The prevalence of AI in both attacks and defenses continues to shape the threat landscape, necessitating immediate action from organizations.
|
// AI-powered summary generated at 12:00
This Chinese-speaking advanced persistent threat (APT) is one of the most active in Asia.
DetACT correlates click-path, event information, traffic information, financial information and historical information in real time.
The security research community is full of grey beards that earned their stripes writing exploits against mail servers, domain controllers, and TCP/IP stacks. These researchers started writing exploits on platforms like Solaris, IRIX, and BSDi before moving on to Windows exploitation. Now they run c...
Vid sharing site could lead to remote code execution
Latest scams hit inboxes at the double
Today we are launching Empire Hacking, a bi-monthly meetup that focuses on pragmatic security research and new discoveries in attack and defense. Empire Hacking is technical. We aim to bridge the gap between weekend projects and funded research. There won’t be any product pitches here. Come prepared...
This marks the first time an SAP attack against a national security service provider has been publicly uncovered.
China not happy with soldiers wearing fitbands
Faut-il faire le même effort pour sécuriser l’automate qui emballe des savons et celui qui assure l’arrêt d’urgence d’un réacteur ? Poser la question c’est y répondre. Comme dans les SI(0) de gestion où l’on fait varier la sécurité selon [...] Lire la suite
The website for the UK celebrity chef has been compromised for the third time this year, to serve password-stealers.
The ingenious scam takes advantage of the auto-refill function that tops up balances with a linked bank card.
Sale Slash has a date in court after alleged scam
Priority 2 vulnerabilities will get fixed on Tuesday
The majority of IT security professionals don’t have full visibility into where all their organization’s sensitive data resides.
Using a Flash vulns to compromise an ad network, the exploit kit served Carberp, the banking Trojan.
The campaign is affecting dozens of top adult sites, with over 250 million monthly visits combined.
A coordinated assault would wreak ongoing havoc on business operations, even threatening national security.
Department of Homeland Defense apparently not happy post-IBM deal
Now patched vulnerability branded as major security risk
A fresh campaign is leveraging the site to serve up completely realistic malware-laden documents.