> TODAY'S SUMMARY (97 articles)
Today's cybersecurity landscape reveals a range of significant threats and vulnerabilities. Companies are facing substantial losses, with token thefts related to illicit LLM charges costing over $100,000 daily. CISA has identified two critical vulnerabilities in Ivanti Connect Secure, urging immediate remediation. Google has disrupted the XCPE botnet, which was exploiting Android TV firmware. Meanwhile, a new AI-powered infostealer has emerged, effectively ranking stolen data by potential financial value. European supermarkets are grappling with a second wave of cyberattacks on their refrigeration systems, leading to widespread food spoilage. Additionally, the FBI has attributed the recent $6.3 billion Binance cryptocurrency heist to North Korean hackers, intensifying concerns over crypto security.
|
// AI-powered summary generated at 16:00
The (Russian) Neutrino exploit kit was first described by the French researcher Kafeine (Malware don't need Coffee) almost exactly one year ago. "A new exploit kit is being advertised since yesterday on underground forum : Neutrino," he announced. Now it is for sale.
Team Cymru, a US security research firm based in Illinois has been investigating a SOHO router pharming campaign since January. So far it has identified 300,000 compromised devices, predominantly in Europe and Asia, with evidence that the campaign started at least in December 2013.
Javelin shows you how modern attackers would approach and exploit your enterprise. By simulating real-time, real-world attack techniques, Javelin identifies which employees are most likely to be targets of spearphishing campaigns, uncovers security infrastructure weaknesses, and compares overall vul...
Reuters Technology reporter Joseph Menn interviewed security expert Bruce Schneier in front of last week’s TrustyCon audience in San Francisco, where the security expert provided his analysis of the government surveillance controversy
As teens and tweens increasingly live their lives digitally and in an oversharing-friendly way, online safety has become a hot topic for concerned parents. Typically it’s seen as the families’ responsibility for monitoring their children’s internet and mobile use, but purveyors of social sites are b...
Have you ever wanted to make a query into a native mode program asking about program locations that write a specific value to a register? Have you ever wanted to automatically deobfuscate obfuscated strings? Reverse engineering a native program involves understanding its semantics at a low level unt...
Russia Today (RT) tweeted Sunday, "Hackers deface http://RT.com website, crack admin access, place 'Nazi' in every headline. Back to normal now." Although the hackers are not known, it could be in retaliation for the increasing number of reports describing the pro-West Kiev government as 'neo-Nazi....
Bloomberg reported Saturday that US retail giant Sears "is investigating a possible security breach after a series of cyberattacks on other retailers have exposed the data of millions of consumers." Sears is apparently being aided in this investigation by both Verizon's digital forensics unit and th...
1 - Création du CERT-FR Le 21 janvier 2014, le CERTA a changé de nom pour devenir le CERT-FR (Computer Emergency Response Team - France). Le CERT-FR est le CERT gouvernemental français. Il apporte son soutien en matière de gestion d'incidents aux ministères, institutions, juridictions, autorités...
The SANS Institute has released its latest training and events schedule for 2014 in the Europe, Middle East and Asia regions
At a time of heightened tension between Russia and the West over Ukraine, a German security firm describes a sophisticated rootkit that it suggests may have been developed by Russian intelligence services. Named after a string found in the code, Ur0bUr()sGotyOu#, the Uroburos malware is thought to t...
1 - Création du CERT-FR Le 21 janvier 2014, le CERTA a changé de nom pour devenir le CERT-FR (Computer Emergency Response Team - France). Le CERT-FR est le CERT gouvernemental français. Il apporte son soutien en matière de gestion d'incidents aux ministères, institutions, juridictions, autorités...
According to documents from Edward Snowden, more than 7% of Yahoo chat users send intimate photos taken via webcam. This is known because GCHQ stopped to count them from among their intercepts. But the concept and practice of 'revenge porn' should make people pause and carefully consider the possibl...
As (ISC)² celebrates its 25th anniversary, the global non-profit is well underway to conducting the most extensive overhaul of the CISSP certification exam in its history. Infosecurity catches up with its executive director at the RSA Conference in San Francisco for a retrospective, and what to expe...
The Council on Cybersecurity (CCS) has launched the 2014 US Cyber Challenge, calling on the industry and government to “get serious” about the workforce problem. The initiative aims to find 10,000 bright students and turn them into cybersecurity professionals.
The BBC reported yesterday that energy companies "are being refused insurance cover for cyber-attacks because their defenses are perceived as weak." Before cover is offered, applicants must undergo a security audit by the insurance companies, but "the majority of applicants were turned away because...
In October 2013 the UK's National Crime Agency announced that a 28-year old Briton, simultaneously identified by the FBI as "Lauri Love, 28, of Stradishall, England," was arrested on suspicion of hacking into US Army, US military and US government computers. Yesterday the FBI further charged him wit...
A new variant of ransomware dubbed BitCrypt has been smashed open by a pair of French researchers.
The US is not unique among nations when it comes to its intelligence gathering abilities. “We are just better” at it than most countries, according to Richard Clarke, the former presidential counter-terrorism adviser.
In his keynote at the RSA Conference in San Francisco, February 25 2014, Scott Charney, VP of Microsoft’s Trustworthy Computing Group, insisted that Microsoft has not compromised its principles in order to work with the NSA