Consumers should protect themselves by using least-privilege principles
Consultancy firm Booz Allen has published a comprehensive report on Chinese-sponsored threat
With ECR permissions you can easily distribute a backdoor to production servers, developer's laptops, or CI/CD pipelines and own the environment by gaining privileged permissions.
The group is characterized by the use of a stolen digital certificate issued by DEEPSoft
YoWhatsApp v2.22.11.75 was distributed via ads on Android apps like Snaptube and VidMate
Andrew Haberlandt During my summer internship at Trail of Bits, I worked on the fork of the RBPF JIT compiler that is used to execute Solana smart contracts. The RBPF JIT compiler plays a critical role on the Solana blockchain, as it facilitates the execution of contracts on validator nodes by defa...
Budworm leveraged the Log4j vulnerabilities to compromise the Apache Tomcat service on servers
Warning to orgnaizations to be aware of risky devices across IT, IoT, OT and IoMT
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in August and September.
Articles
AuthPoint ADFS agent installation fails on secondary server
AuthPoint Gateway status is Not Installed or Not Connected after upgrade to...
The NCSC guidance has been issued amid a significant increase in supply chain attacks in recent years
The Russia-Ukraine conflict highlights the value of defensive cybersecurity, says Dr Alexi Drew
Earlier this year, I successfully completed my internship at Trail of Bits and secured a full-time position as a Blockchain Security Analyst. This post is not intended to be a technical description of the work I did during my internship. Rather, it is intended to describe my general experience as a...
Vidar, an infostealer, has entered the top 10 list in eighth place for the first time
Thirteen of the 84 vulnerabilities fixed in yesterday’s update are classified as 'Critical'
tl;dr: Our publicly available Semgrep ruleset now has 11 rules dedicated to the misuse of machine learning libraries. Try it out now! Picture this: You’ve spent months curating images, trying out different architectures, downloading pretrained models, messing with Kubernetes, and you’re finally read...
The breach affected around 20 clients and 1000 current and/or former Dialog employees
The vulnerability has been assigned a CVE – Siemens has already updated affected systems and published recommendations for mitigating the risk
Researchers at ESET found evidence of previously undocumented custom tools used by the hackers
We are all in it together, says the DoE's chief information officer
Google embeds in cloud security market with new software suite