Jared Semrau News Today

Analysis from Google has found that zero-day vulnerabilities are much more heavily exploited for espionage purposes than for financially motivated cyber crime.

Apache fixed a vulnerability in its OfBiz enterprise resource planning (ERP) framework last month, but attackers and researchers found a way around the patch.

The latest data shows an uptick in the number of zero-day bugs observed being exploited in the wild this year. Some observers tell SC Media that may actually be a good sign for security.

Intel, AMD Dispute Findings on Chip Vulnerabilities May 20, 2021 Compliance DougOlenick) • May 6, 2021     Get Permission Intel and AMD are disputing the findings of researchers from two universities who say theyve discovered new attacks on Intel and AMD processors that can bypass most of the defenses put in place earlier for similar "Spectre" and "Meltdown" attacks. An attacker exploiting the vulnerabilities could...

A primer on the proliferation of offensive cyber capabilities Issue Brief by Winnona DeSombre, Michele Campobasso, Dr. Luca Allodi, Dr. James Shires, JD Work, Robert Morgus, Patrick Howell O’Neill, and Dr. Trey Herr Executive summary Offensive cyber capabilities run the gamut from sophisticated, long-term disruptions of physical infrastructure to malware used to target human rights journalists. As thes...