The treaty would allow any country to request technology firms to aid in cybercrime investigations and preserve data about their users — potentially imperiling penetration testers and security researchers, among others.
Автор: Robert Lemos, Contributing Writer
CrowdStrike’s Legal Pressures Mount, Could Blaze Path to Liability
Following the July 19 outages caused by a bad update, the cybersecurity firm faces shareholder lawsuits and pressure to pay damages for at least one major customer, Delta Airlines. Will software liability follow?
Monitoring Changes in KEV List Can Guide Security Teams
The number of additions to the Known Exploited Vulnerabilities catalog is growing quickly, but even silent changes to already-documented flaws can help security teams prioritize.
BlankBot Trojan Targets Turkish Android Users
While still under development, the malware contains Turkish-language filenames, can record the screen and keystrokes, and inject custom overlays to steal passwords and sensitive data.
Russia’s Priorities in Prisoner Swap Suggest Cyber Focus
At least two Russian nationals serving prison sentences for cybercrime offenses, Vladislav Klyushin and Roman Seleznev, were released as part of the landmark prisoner swap.
Attacks on Bytecode Interpreters Conceal Malicious Injection Activity
By injecting malicious bytecode into interpreters for VBScript, Python, and Lua, researchers found they can circumvent malicious code detection.
India-Linked SideWinder Group Pivots to Hacking Maritime Targets
The nation-state espionage group known for attacking Pakistan has expanded its reach to targets in Egypt and Sri Lanka.
Companies Struggle to Recover From CrowdStrike’s Crippling Falcon Update
The cybersecurity firm says that 97% of sensors are back online, but some organizations continue to recover with costs tallied at $5.4 billion for the Fortune 500 alone.
Nvidia Embraces LLMs & Commonsense Cybersecurity Strategy
Nvidia doesn’t just make the chips that accelerate a lot of AI applications — the company regularly creates and uses its own large language models, too.
Pro-Palestinian Actor Levels 6-Day DDoS Attack on UAE Bank
DDoS cyberattack campaign averaged 4.5 million requests per second, putting the bank under attack 70% of the time.