> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several pressing threats and trends. The UK's National Cyber Security Centre (NCSC) warns of impending AI-powered attacks on critical infrastructure, emphasizing the need for improved resilience against vulnerabilities. A resurgence of supermarket fridge attacks has compromised over 100 stores across Europe, indicating the ongoing risk of IoT device exploitation. Additionally, the NIS2 directive holds board members accountable for access control decisions, underscoring a shift towards greater corporate responsibility in cybersecurity. Meanwhile, a critical vulnerability in Siemens IoT2050 devices and an unpatched flaw in a CryptoPayment Gateway plugin are actively being exploited by attackers. Lastly, a dismantled botnet involving 1.3 million compromised Android TV boxes highlights the ongoing issues with malicious software proliferation.
|
// AI-powered summary generated at 08:00
War torn country sucked into Beijing’s South Asian strategy
Russian cyber-criminals target internal banking systems
This is part two of a two-part blog post that shows how to use KLEE with mcsema to symbolically execute Linux binaries (see the first post!). This part will cover how to build KLEE, mcsema, and provide a detailed example of using them to symbolically execute an existing binary. The binary we’ll be s...
Hot topics will include cloud security and mobility—and the intersection between them.
A citizen media group critical of ISIS was recently targeted in a customized digital attack designed to unmask their location.
At THREADS 2014, I demonstrated a new capability of mcsema that enables the use of KLEE, a symbolic execution framework, on software available only in binary form. In the talk, I described how to use mcsema and KLEE to learn an unknown protocol defined in a binary that has never been seen before. In...
A variant of the Alina malware, used to scrape credit card (CC) data from point of sale (POS) software, has been rampaging its way through the wild lately.
Bitdefender claims cyber-criminals will look to new channels to spread malware in 2015
Employees feel let down by movie giant after their personal data was exposed
Cinema chains refuse to screen 'The Interview'
Denial of service blitz last year was largest ever recorded at the time
CSP takes aim at XSS and prevents extensions from loading unsafe code.
Latest Financial Stability Report says much work still to be done
Eset report claims crypto-malware has now infected 40,000 users
The file-sharing site that was known for living up to its name has been replicated.
Claiming to be a financial document, this attack's attachment uses a three-pronged execution path.
Unpatched QNAP devices are at high risk, says training institute
Cloudmark study claims critical business and customer data at risk
Latest ransomware spotted by researchers uses Elliptic Curve Cryptography
A vulnerability in the RevSlider plug-in opens the door to complete website compromise.