> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several pressing threats and trends. The UK's National Cyber Security Centre (NCSC) warns of impending AI-powered attacks on critical infrastructure, emphasizing the need for improved resilience against vulnerabilities. A resurgence of supermarket fridge attacks has compromised over 100 stores across Europe, indicating the ongoing risk of IoT device exploitation. Additionally, the NIS2 directive holds board members accountable for access control decisions, underscoring a shift towards greater corporate responsibility in cybersecurity. Meanwhile, a critical vulnerability in Siemens IoT2050 devices and an unpatched flaw in a CryptoPayment Gateway plugin are actively being exploited by attackers. Lastly, a dismantled botnet involving 1.3 million compromised Android TV boxes highlights the ongoing issues with malicious software proliferation.
|
// AI-powered summary generated at 08:00
Cloud security oversight has shifted from the IT room to the boardroom, with 61% of companies indicating that executives are now involved in such decisions.
In the wake of a 2012 breach that affected 24 million, the online retailer is facing fines and oversight.
We need to do more to protect ourselves. 2014 overflowed with front-page proof: Apple, Target, JPMorgan Chase, etc, etc. The current, vulnerable status quo begs for radical change, an influx of talented people, and substantially better tools. As we look ahead to driving that change in 2015, we’re pr...
Organizations in multiple sectors compromised in new tests
Huffington Post, Yahoo News, AOL, TMZ and many others are affected by the infection, which makes use of the legitimate AOL ad network.
This is part two of a two-part blog post that shows how to use KLEE with mcsema to symbolically execute Linux binaries (see the first post!). This part will cover how to build KLEE, mcsema, and provide a detailed example of using them to symbolically execute an existing binary. The binary we’ll be s...
Attackers got sloppy and revealed their true location, Comey claims
Wenzhou PSB blunder reveals $24,000 purchase
At THREADS 2014, I demonstrated a new capability of mcsema that enables the use of KLEE, a symbolic execution framework, on software available only in binary form. In the talk, I described how to use mcsema and KLEE to learn an unknown protocol defined in a binary that has never been seen before. In...
Operational wallets compromised as crypto-currency suffers first blow of 2015
Insider breach suspected after Pastebin post offers client log-ins for cash
Researcher told card maker about problem in August 2013
The automated tool mounts a social engineering campaign and a man-in-the-middle attack to capture credentials.
Bristolians miffed by incongruous web defacement
USBs likely to have introduced “low risk” worm, says energy minister
Project Zero’s strict 90-day deadline branded ‘irresponsible'
An unpatched privilege escalation flaw in Windows 8.1 opens the door for network infiltration.
The popular online gaming outlet has been infiltrated to push credential-stealing malware.
Activists urge tech giants to revoke certificates.
Feds want more tech experts in their crime-fighting ranks.