Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in October.
Articles
Full Disk Access Error in Endpoint Protection Service After Upgrade to macOS 13 Ventura
Generate a .HAR file from your web browser
macOS Ventura 13.x...
The come after the August release of guidance for developers and the October one for suppliers
Cyber-criminals are exploiting the busy period during both purchase and delivery stages
TL;DR: Trail of Bits has developed abi3audit, a new Python tool for checking Python packages for CPython application binary interface (ABI) violations. We’ve used it to discover hundreds of inconsistently and incorrectly tagged package distributions, each of which is a potential source of crashes an...
The attack bypassed both SPF and DMARC email authentication checks
As well as malvertising and phishing links, the new threat actor is now also using contact forms to deliver its payloads, found Microsoft
Over the years, we’ve built many high-impact tools that we use for security reviews. You might know some of them, like Slither, Echidna, Amarna, Tealer, and test-fuzz. All of our tools are open source, and we love seeing the community benefit from them. But mastering our tools takes time and practic...
Social engineers are using Unicode techniques to bypass filters
St Petersburg couple were arrested in Argentina
Trail of Bits recently published a blog post about a signed integer overflow in certain versions of SQLite that can enable arbitrary code execution and result in a denial of service. While working on proof-of-concept exploits for that vulnerability, we noticed that the compiler’s representation of a...
CISA notice warns of 1300 victims and counting
Vyacheslav Igorevich Penchukov was arrested in Geneva on October 23, 2022, and is now pending extradition to the US
La société de prélèvement direct London & Zurich a été victime d'une attaque par ransomware le 10 novembre, entraînant des interruptions de service et des retards de paiement significatifs pour ses clients, certains devant recourir à des prêts pour pallier les problèmes de trésorerie. La communicati...
The report suggests 44% agree their firm will cut security spending in the next year
The discovery was made by security researchers at Mitiga
Sigstore announced the general availability of its free and ecosystem-agnostic software signing service two weeks ago, giving developers a way to sign, verify and protect their software projects and the dependencies they rely on. Trail of Bits is absolutely thrilled to be a part of the project, and...
New research analyzes email scam techniques in the build-up to this year's Black Friday
The NCSC's founding CEO, Ciaran Martin, explains why the cyber industry is now a public good
How to abuse AWS Organizations' default behavior and lateral movement capabilities.
Announcement recognizes growing volume of smartphone payments