> TODAY'S SUMMARY (16 articles)
Today's cybersecurity landscape highlights significant threats, notably the FBI's attribution of the record $6.3 billion Binance crypto heist to North Korean hackers, known as TraderTraitor. This breach underscores the ongoing risk posed by state-sponsored cybercriminals in the cryptocurrency sector. Additionally, a new vulnerability in Android, dubbed "SMS of Death," allows attackers to crash call services through a hidden message, posing a severe risk to users. In other news, hackers exploited a critical flaw in Canonical's LXD, enabling unauthorized logins as trusted clients. Furthermore, malicious code on Polymarket's website led to the theft of approximately $2.7 million from traders, showcasing vulnerabilities in online platforms. Lastly, a sophisticated malware campaign targeting government systems in Asia has been identified, underscoring the evolving nature of cyber threats.
|
// AI-powered summary generated at 20:00
One of the three finalist entries for Microsoft's first-ever BlueHat Prize for building new security defense technologies is now part of the software giant's free Enhanced Mitigation Experience Toolkit (EMET).
Close to 15% of medical device recalls by the US Food and Drug Administration (FDA) between January 2009 and May 2011 involved software problems, which could pose privacy risks to patient data, according to a study funded by the US Department of Health and Human Services.
Il était annoncé, donc attendu, et il est arrivé avec l’été : un guide de l’ANSSI intitulé « Maîtriser la SSI pour les systèmes industriels », accompagné d’un « Cas pratique ».
Sa seule existence est déjà utile pour « officialiser » le sujet, [...] Lire la suite
Siemens has patched a number of security holes in its SIMATIC supervisory control and data acquisition (SCADA) systems, according to the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).
European Union (EU) regulators have a reached an “understanding” with Google over concerns about anti-competitive behavior on the part of the search engine giant.
One of the more interesting aspects of the Flame malware was the MD5 collision attack that was used to infect new machines through Windows Update. MD5 collisions are not new, but this is the first attack discovered in the wild and deserves a more in-depth look. Trail of Bits is uniquely qualified to...
The free open-source web application firewall known as ModSecurity – once just an Apache plug-in – now also plugs directly into IIS and Nginx web servers, and is particularly good for virtual patching.
Earlier in May it was found that Citadel was delivering the Reveton ransomware. Now Trusteer has discovered it delivering a children’s charity scam to Facebook users.
Mac security firm Intego was the first to sound the alarm yesterday, calling the newly discovered trojan Backdoor:OSX/Crisis. Today Sophos issues its own warning about OSX/Morcut.A – which seems to be the same malware.
The US Federal Trade Commission (FTC) is warning that unauthorized charges on wireless phone bills, known as “cramming”, are becoming an increasingly serious problem for US consumers.
A physician’s unencrypted personal laptop that may have contained protected health information on 3,900 patients at Boston-based Beth Israel Deaconness Medical Center was stolen, the hospital admitted Monday.
The latest 'Dirty Dozen' spam-relaying countries report from Sophos shows that Asia in general, and India in particular, is now responsible for the greatest volume of the world’s spam.
The social sharing site Pinterest has begun temporarily locking down accounts in an effort to combat an increase in suspected hacking on the site.
The Japanese Finance Ministry announced on Friday that it had discovered 123 desktop computers that had been infected with a remote access trojan between January 2010 and November 2011.
Following the first ever loss reported by Microsoft last week – largely blamed on the purchase of aQuantive in 2007 – it is the purchase of Skype for $8.5 billion in 2011 that is most concerning security folks.
Venafi has been extrapolating statistics from mobile phone loss – and expects the equivalent of 200 million books full of data will be lost during the course of the London Olympics.
The group NullCrew has claimed that it hacked into Yale University’s network and stole user names, passwords, social security numbers, addresses, and phone numbers of 1,200 students and staff.
Nearly three years ago, computers at the University of East Anglia were breached and thousands of confidential scientific documents, many skeptical that climate change is man-made, were stolen and subsequently leaked. The incident became known as ClimateGate.
Space Rogue is a graduate of L0pht Heavy Industries - one of the original and best of the old-school hacking groups. He knows a bit about hacking, hacking events – and those that never happened.
The electricity industry has failed to consistently include cybersecurity features in the deployment of smart grid systems, and jurisdictional disputes have stymied government action, judged the US Government Accountability Office (GAO).