SOVA v4 features new capabilities and is reportedly targeting more than 200 mobile applications
The CSRB concluded that the initial disclosure on Log4j was done right, but there is still much to improve
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in June and July (note that previously published June Knowledge Base digest was incomplete):
Articles
Why do I see a "failed to connect B channel" Firebox log message?
Ho...
According to researchers, Russia is rolling out a growing list of wiper attacks against Ukraine
Former US CISA Director Chris Krebs opens Black Hat USA detailing the state of cybersecurity today
Début août 2022, une attaque sophistiquée a visé les systèmes de l'organisation allemande IHK, incitant son fournisseur de services, IHK-GfI, à déconnecter ses 79 chambres de commerce de l'internet pour limiter les dégâts. Des experts du BSI et de la ZAC NRW soupçonnent des motivations d'espionnage...
New open source project set to reduce operational pain for SecOps analysts
Accenture warns that stolen data is flooding the cybercrime underground
L'attaque a conduit à l'arrêt de tous les équipements informatiques et au redémarrage sur une nouvelle infrastructure IT. Tous les départements de l'entreprise ont été affectés et la société a eu recours à l'activité partielle afin de compenser.
Interpol warns of growing role of money mules
The campaign is not only ongoing, the threat actors increased its efforts to compromise targets using VileRAT
You think you’ve found a critical bug in a Solidity smart contract that, if exploited, could drain a widely used cryptocurrency exchange’s funds. To confirm that it’s really a bug, you need to figure out the value at an obscure storage slot that has no getter method. Adrenaline courses […]
The report shows an 11% rise in archive files containing malware, including LNK files
The Emotet botnet continues to evolve and now includes a credit card stealer module
Jon L provides an update on the NCSC's guidance on the 'WannaCry' ransomware.
West Sussex man blackmailed his victims
Malware and botnet detections also soar
In this advisory we are disclosing a vulnerability in the Huawei log device that allows any unprivileged process to learn the value of randomized kernel pointers. The vulnerability can be used to defeat KASLR mitigation.
Huawei kernels are shipped with custom log devices (/dev/hwlog_dubai, /dev/hwlo...
August Patch Tuesday addresses over 120 vulnerabilities
Some of these packages were capable of stealing user credentials and environment variables