> TODAY'S SUMMARY (6 articles)
Today's cybersecurity landscape highlights several significant threats and trends. The UK's National Cyber Security Centre (NCSC) warns of an imminent rise in AI-powered cyberattacks targeting critical infrastructure, driven by outdated security measures. A recent assessment projects that these AI-enabled threats will escalate through 2028, underscoring the urgency for organizations to enhance their defenses. Additionally, tech firms have successfully dismantled a large botnet consisting of over 1.3 million compromised Android TV boxes, which had been misused for proxy services. Meanwhile, European supermarkets are facing repercussions for neglecting cybersecurity after a recent attack led to operational failures and spoilage. Overall, the combination of AI advancements and overlooked vulnerabilities poses an unprecedented risk to organizations.
|
// AI-powered summary generated at 04:00
The malware intercepts text messages and harvests information from the phone.
Microsoft said that the busy Dyreza RAT has a fresh attack vector using a wire transfer phish.
This is part two of a two-part blog post that shows how to use KLEE with mcsema to symbolically execute Linux binaries (see the first post!). This part will cover how to build KLEE, mcsema, and provide a detailed example of using them to symbolically execute an existing binary. The binary we’ll be s...
GCHQ and NCA to co-operate, but critics say it’s simply electioneering
Cyber-criminals targeting victims inside Great Firewall are blamed for malicious domain registrations
At THREADS 2014, I demonstrated a new capability of mcsema that enables the use of KLEE, a symbolic execution framework, on software available only in binary form. In the talk, I described how to use mcsema and KLEE to learn an unknown protocol defined in a binary that has never been seen before. In...
In a new wrinkle in an ongoing attack, the BlackEnergy malware is targeting internet-connected human-machine interfaces (HMIs).
Mobile payments processor only partially encrypted data travelling across its network
Imperva spots attackers using shopping period as cover to steal data and break systems
An attacker could alter product prices, delete goods or close a merchant’s shop on the site.
Cloud Atlas uses an unusual set of tactics that are not very common in the APT world, including using cloud accounts for C&C communications.
The highly sophisticated malware targets wireless and PC users in high-value positions.
Panel also urges greater government transparency
Claire Perry claims attacks on driver-assisted cars and smart motorways could create barrier to adoption
The Better Business Bureau is warning that mobile apps are being pressed into service in a high-tech twist on an old scam.
The bank lost two unencrypted files with personal information for more than 90,000 Massachusetts customers, but didn't tell anyone for seven months.
Repurposed attack easier than last time as it targets TLS
Only around a third are adequately tooled up
Banks and other financial institutions now have the go-ahead to pursue compensation from the retail giant via class-action lawsuits.
Shearer will succeed executive director Hord Tipton at the end of 2014.