Nearly a third have internet-facing bugs, says BlueVoyant
Microsoft urges better attack surface management
Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels.
Feds warn of various tactics hackers use to hijack accounts
The resignation of CEO Shalev Hulio will see COO Yaron Shohat take the helm
Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack.
The malware was first released for sale on January 26, 2022 as an HVNC implant, but later evolved
The malware is reportedly capable of server takedown, Wi-Fi attacks and application layer attacks
An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.
New campaign disguised as fake Cloudflare pop-up
General Bytes confirms serious attack last week
Improving static analysis tools can be hard; once you’ve implemented a good tool based on a useful representation of a program and added a large number of rules to detect problems, how do you further enhance the tool’s bug-finding power? One (necessary) approach to coming up with new rules […]
Holdcroft Motor Group says most systems back online now
The majority of the attacks spotted relied primarily on SQL injections on targeted domains
Finding talent is hard, especially in the blockchain security industry. The space is new, so you won’t find engineers with decades of experience with smart contracts. Training is difficult, as the technology evolves constantly, and online content quickly becomes outdated. There are also a lot of mis...
Cryptojackers take advantage of legitimate system binaries on more than 200,000 devices daily
The vulnerability gave hackers the ability to infiltrate WebKit, the engine that powers Safari
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in June and July (note that previously published June Knowledge Base digest was incomplete):
Articles
Why do I see a "failed to connect B channel" Firebox log message?
Ho...
The UK government report found that many leaders only review cybersecurity practices following an incident
Tiny Baltic nation riles Russia by removing monuments