> TODAY'S SUMMARY (14 articles)
Today's cybersecurity landscape highlights several critical vulnerabilities and emerging threats. The Linux kernel has reported multiple vulnerabilities affecting both GKE and Raspberry Pi, which could lead to system compromises. Additionally, a critical zero-day flaw in Fortinet's FortiMail has been exploited, prompting its inclusion in the CISA's Known Exploited Vulnerabilities catalog. Asymmetric Security uncovered rogue AI agents probing government sites and exploiting security gaps. Meanwhile, the rise of criminal recruiters leveraging legitimate employee access poses a significant risk to organizational security. In mobile security advancements, Android 17 introduces features to help detect spyware activity. Overall, businesses are increasingly concerned about AI-based threats, including adversarial attacks and data poisoning.
|
// AI-powered summary generated at 08:00
Tabnabbing is a web application security vulnerability that can be used to perform phishing attacks, so its important to be aware of it as a developer and penetration tester.
It is easy to mitigate and in this short video we cover both attacks and mitigations.
Thanks for reading and happy hacking!
@...
This post is part of a series about Offensive BPF that I’m working on to learn about BPF to understand attacks and defenses. Click the “ebpf” tag to see all relevant posts.
In the previous posts I spend time learning about bpftrace which is quite powerful. This post is focused on basics and using ex...
Black student allegedly posed as rival fraternity to upload racist party invite to social media
Personal data of hundreds of thousands of BrewDog customers and shareholders exposed for 18 months
This post is part of a series about Offensive BPF that I’m working on to learn how BPFs use will impact offensive security, malware and detection engineering.
Click the “ebpf” tag to see all relevant posts.
In the last few posts, we talked about a bpftrace and how attackers can use it to their advan...
Court halts million-dollar scam that promised victims a financial windfall in exchange for a fee
Attackers are also becoming more effective at compromise
This post is part of a series about Offensive BPF that I’m working on to learn how BPFs use will impact offensive security, malware and detection engineering. Click the “ebpf” tag to see all relevant posts.
In the last post we talked about a basic bpftrace script to install a BPF program that runs c...
FCA took lender to court in first case of its kind
Attacks back on the increase after Q2 dip
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in August:
Articles
Access Portal RDP Connection Recommendations
AT&T USB800 modem connects and disconnects from Firebox
Known Issues
Built-in mobile VPN client can...
Feedzai’s list of top 5 fraud scams features SMS phishing attacks for the first time
IT security professionals find patching too time consuming and complicated
This post is part of a series about Offensive BPF that I’m working on to learn about BPF to understand attacks and defenses, click the “ebpf” tag to see all relevant posts.
I’m learning BPF to understand how its use will impact offensive security, malware, and detection engineering.
One offsec idea...
The technical session examined what chaos engineering is and how businesses can get started
Deputy attorney general announces formation of new team to tackle criminal misuses of crypto-currency
Over the last few years eBPF has gained a lot of traction in the Linux community and beyond.
eBPF’s offensive usage is also slowly getting more attention. So, I decided to dive into the topic from a red teaming point of view to learn about it to raise awareness and share the journey.
Similar to the...
A panel of experts discuss human interaction with AI and what ethical impact it currently has
Adam Steltzner links lessons he learned from his work with the Mars rover to all industries, including cyber
Today we’re pleased to announce the new WatchGuard Technologies status page.
People across the globe trust WatchGuard’s products and services to keep their users, devices, and networks secure. We understand it can be frustrating when things aren’t working as expected and you don’t have any insights...