Des comptes de messagerie électronique appartenant à des membres du comité directeur du SPD ont été piratés. Les pirates ont exploité une faille de sécurité dans un serveur Exchange et ont volé des données. La piste de l'attaque mène en Russie. Les autorités allemandes ont été informées et les perso...
PurFoods, un service de livraison de repas à domicile aux États-Unis, a révélé une violation de données affectant plus de 1,2 million de personnes. Selon un rapport, les pirates pourraient avoir accédé aux informations personnelles, financières et médicales des clients, y compris les noms, les numér...
The group used Telegram channels, a DDoS payment program, a multi-OS supported toolkit and GitHub
Hackers discussed how to use stolen payment cards and bypass geo controls and SMS limitations
Read the official announcement on the Sigstore blog as well! Trail of Bits is thrilled to announce the first stable release of sigstore-python, a client implementation of Sigstore that we’ve been developing for nearly a year! This work has been graciously funded by Google’s Open Source Security Team...
Cisco did not release updates to address the vulnerabilities and no workarounds address them
The ransomware gang allegedly used its latest encryptor, ‘Black,’ which borrows parts of the late Black Matter group’s encryptor
Trail of Bits is publicly disclosing four vulnerabilities that affect wolfSSL: CVE-2022-38152, CVE-2022-38153, CVE-2022-39173, and CVE-2022-42905. The four issues, which have CVSS scores ranging from medium to critical, can all result in a denial of service (DoS). These vulnerabilities have been dis...
Criminal network may have made hundreds of millions from scams
Sanctioned entities accounted for the largest volume
This time last year, we wrote about the more than 190 Trail of Bits-authored pull requests that were merged into non-Trail of Bits repositories in 2021. In 2022, we continued that trend by having more than 400 pull requests merged into non-Trail of Bits repositories! Why is this significant? While w...
Aflac and Zurich reveal major breaches this week
The updates come from The Guardian's CEO Anna Bateson and its editor-in-chief Katharine Viner
Andrew A explains what you must check before giving Managed Service Providers (MSPs) the keys to your kingdom.
The growth is associated with using HTML attachments as a delivery method in credential phishing
Darktrace’s latest report analyses findings from the energy, retail and healthcare sectors
Le district scolaire de Des Moines a été victime d'une cyberattaque en janvier 2023. Près de 6 700 personnes ont été informées de l'incident et de la possible exposition de leurs données personnelles. Des mesures de sécurité ont été prises pour empêcher de futures attaques similaires. Les personnes...
The warning comes from Imperva's security researcher Ron Masas
War in Ukraine is making firms more anxious
Known Issues
AuthPoint external identity does not sync users
Cannot configure a link aggregation interface to use both built-in and interface module 10G SFP ports (M590/M690)
Cannot fully uninstall the DNSWatchGO client through Group Policy Object (GPO)
HTTPS Proxy no longer works on a Firebox in B...