> TODAY'S SUMMARY (22 articles)
Today's cybersecurity news highlights several key issues:
1. Two former US Air Force members have been sentenced for running a million-dollar Business Email Compromise (BEC) scheme while in service.
2. A critical zero-day vulnerability in Citrix NetScaler is being actively exploited, with custom web shells identified for gaining root access.
3. High-severity vulnerabilities have been patched in popular cryptographic libraries OpenSSL and WolfSSL, emphasizing the need for timely updates.
4. A new variant of the Spectre attack has emerged, capable of stealing Linux root password hashes in under five minutes.
5. The EU Cyber Resilience Act will impose mandatory cybersecurity requirements starting December 2024, impacting digital products significantly.
These incidents underscore the ongoing threats in both exploitations of software vulnerabilities and advanced persistent threats.
|
// AI-powered summary generated at 08:01
Lack of awareness over security impact of home working
Third-party file-sharing service from Accellion was targeted
Security metrics are an interesting topic.
Over the years I used âscoresâ as a tool to identify and shine light on problematic areas or highlight lack of engineering and security quality of certain teams.
A security score should not seen as an objective or absoulte measure, but it allows to compare...
Sunspot used to inject Sunburst into Orion platform, says CrowdStrike
Cloud configuration snafu exposes scraped data
United Nations Environment Programme Breached, 100K+ Employee Records Accessed Executive Summary We noticed that The United Nations had a Vulnerability Disclosure Program and a Hall of Fame, therefore Sakura Samurai æĄăźäŸ our security research group, set out to look for vulnerabilities to report to...
Google, Apple, Amazon suspend app
Early-stage UK cyber-companies see funding fall by 96% since COVID-19 lockdowns
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in December:
Articles
Reserved Firebox-DB authentication server user names
macOS Big Sur 11.x software compatibility
Fireware v12.5.7 and v12.6.4 beta releases in Wa...
Global investment firm acquires cybersecurity vendor from Raytheon Technologies
Online (ISC)ÂČ exam proctoring pilot program for cybersecurity certifications launches today
An introduction to the Instance Metadata Service and how to access it.
Riley will be responsible for growing Bridewellâs managed security service portfolio
Pompeo green lights CSET at eleventh hour
An introduction to EC2 User Data and how to access it.
Vulnerabilities allowed team to exfiltrate Git credentials
Use of general warrants to target large numbers is illegal
Brute force the IAM permissions of a user or role to see what you have access to.
US locks up Russian who hacked major financial institutions to steal data
October ransomware attack is costing Vermont health network millions in lost revenue