An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.
The attacks reportedly increased in conjunction with the start of the Wimbledon tennis tournament
Corporate and customer data at risk, warns Proofpoint
Improving static analysis tools can be hard; once you’ve implemented a good tool based on a useful representation of a program and added a large number of rules to detect problems, how do you further enhance the tool’s bug-finding power? One (necessary) approach to coming up with new rules […]
Apps have millions of downloads, says Bitdefender
Man allegedly handled over $400,000 in Ryuk proceeds
Finding talent is hard, especially in the blockchain security industry. The space is new, so you won’t find engineers with decades of experience with smart contracts. Training is difficult, as the technology evolves constantly, and online content quickly becomes outdated. There are also a lot of mis...
The advisory was compiled by CISA with the Multi-State Information Sharing & Analysis Center
The package manager started enforcing MFA on owners of gems with over 180 million total downloads
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in June and July (note that previously published June Knowledge Base digest was incomplete):
Articles
Why do I see a "failed to connect B channel" Firebox log message?
Ho...
The study queries more than 950 IT and security professionals across the Americas, EMEA and APAC
Non-profit says Google Voice scams were the most reported threat
Début août 2022, une attaque sophistiquée a visé les systèmes de l'organisation allemande IHK, incitant son fournisseur de services, IHK-GfI, à déconnecter ses 79 chambres de commerce de l'internet pour limiter les dégâts. Des experts du BSI et de la ZAC NRW soupçonnent des motivations d'espionnage...
Manufacturing was most exposed to OT threats in 2021
Zero Day Initiative says incomplete or faulty patches now commonplace
The new packages were masquerading as one of the most popular open-source packages on PyPI
The leak was caused by incorrect configurations of an online tracking tool from Meta
The research resulted in proof-of-concept exploits against seven market-leading automation firms
Electron-based desktop application including Discord, Microsoft Teams and VScode were at risk from a series of vulnerabilities
American teenager explains how he was able to hack his local high school district