Data leaks, breaches and intrusions caused headaches over past year
Overall incidents fell in H1 2022, according to FOI data
En septembre 2022, Toulouse INP a été victime d'une cyberattaque avec le ransomware AvosLocker. L'attaque a été déclenchée via un compte étudiant compromis et a bloqué l'annuaire, les mécanismes d'authentification et les capacités d'accès physique aux bâtiments. Des mesures ont été prises pour rétab...
Redmond passes 1000 CVEs for the year already
iOS 16 supports iPhone devices starting from the iPhone 8
This week I learned about a design flaw with pip download, which allows an adversary to run arbitrary code.
I assumed that running pip install means anything could happen, but pip download seems a bit surprising.
Both seem useful for red teaming though.
Background This post from Yehuda Gelb named Au...
The attacks have been underway since early 2021 and appear focused on intelligence gathering
Some of the Steam accounts stolen were reportedly valued between $100,000 and $300,000
Background If you haven’t done so yet, read my first Zix exploitation article: Spear Phishing with Zix: An Undisclosed Red Team Method for the Hungry APT, which established baselines to abuse the native organizational trust that Zix provides to perform spear phishing on the affected company. Shortly...
Mitel MiVoice appliance bug exploited in sophisticated attack
Prime Minister warns of disruption at border crossings
Background If you haven’t done so yet, read my first Zix exploitation article: Spear Phishing with Zix: An Undisclosed Red Team Method for the Hungry APT, which established baselines to abuse the native organizational trust that Zix provides to perform spear phishing on the affected company. Shortly...
Malware continues to infect QNAP devices
Iran would have directed several networks of cyber threat actors in support of its political goals
2.5 million people were affected, in a breach that could spell more trouble down the line.
The flaws affect HP EliteBook devices and have CVSS scores between 7.5 and 8.2
The flaws were discovered despite Harbor having implemented RBAC on most HTTP endpoints
Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.
Gang believed to have posed as UK financial regulator
New technique makes for faster encryption and improved evasion