This is the latest of a network of nine cybersecurity centers spread across England and Wales to supper SMEs against cybercrime
The report highlighted the enormous business costs of supply chain software attacks
Trail of Bits is publicly disclosing CVE-2022-35737, which affects applications that use the SQLite library API. CVE-2022-35737 was introduced in SQLite version 1.0.12 (released on October 17, 2000) and fixed in release 3.39.2 (released on July 21, 2022). CVE-2022-35737 is exploitable on 64-bit syst...
SonicWall figures show overall attacks trending down
Unspecified number of customers impacted over 2.5 years
Des données médicales d'étudiants de San Diego ont été compromises lors d'une cyberattaque en octobre. Les noms et informations médicales des étudiants ont été compromis. Les responsables ont rapidement sécurisé le réseau, lancé une enquête et informé les autorités. Des mesures de sécurité supplémen...
UK privacy regulator says vulnerable people may be at risk
Russia had the most breaches overall and France had the highest breach density
Une cyberattaque sur ses systèmes d’informations mettant au ralenti les opérations comptables durant une période de trois semaines environ. En date du 31 décembre 2022, l’ensemble des opérations ont pu être faite normalement sans aucune conséquence sur la clôture de l’année 2022.
The out-of-bounds write issue in the kernel could be exploited to execute arbitrary code
The operators could make over $3m if they decide to sell the card dumps on underground forums
Great news!
An article about ropci is in the latest free issue of the Pentest Magazine!
The article has a lot more info then my ropci blog post or the info on the ropci Github repo.
Get your copy and check it out! It also has an article about Nuclei, one of my favorite tools.
Cheers.
Link: https://p...
Financially motivated affiliate appears to be to blame
Suspected hacktivists inside country share sensitive info
This post will highlight a pattern I have seen across multiple production Microsoft Azure Active Directory tenants which led to MFA bypasses using ROPC.
The key take-away: Always enforce MFA! Sounds easy, but there are often misconfigurations and unexpected exceptions. So, test your own AAD tenant f...
Indictments form one of three cases involving Chinese spies
Daixin Team is actively targeting US businesses, mainly in the healthcare sector
There are some neat TTPs that I don’t use frequently, and if the time arises, I need to dig up details again. So, I figured to write some of them down, starting with SSH Agent Hijacking.
What is SSH Agent Hijacking? Short story, if you have keys added to an SSH Agent an adversary with root permissio...
The Veeamp malware was used by the Monti and Yanluowang ransomware groups in these attacks
It is due partly to a major phishing attack DHL warned about before the quarter started