The groups' attacks were reportedly relatively low in sophistication but persistent and well-resourced
The phishing emails contained Microsoft Word documents that exploited the CVE-2017-11882 flaw
Début août 2022, une attaque sophistiquée a visé les systèmes de l'organisation allemande IHK, incitant son fournisseur de services, IHK-GfI, à déconnecter ses 79 chambres de commerce de l'internet pour limiter les dégâts. Des experts du BSI et de la ZAC NRW soupçonnent des motivations d'espionnage...
LogoKit is based on JavaScript and can change logos and text on landing pages in real-time
New social engineering campaign leverages Coinbase
L'attaque a conduit à l'arrêt de tous les équipements informatiques et au redémarrage sur une nouvelle infrastructure IT. Tous les départements de l'entreprise ont été affectés et la société a eu recours à l'activité partielle afin de compenser.
Over five million accounts were exposed
Digital supplier hit by suspected ransomware
You think you’ve found a critical bug in a Solidity smart contract that, if exploited, could drain a widely used cryptocurrency exchange’s funds. To confirm that it’s really a bug, you need to figure out the value at an obscure storage slot that has no getter method. Adrenaline courses […]
The malware was detected in campaigns targeting firms in the industrial and pharmaceutical space
The new feature enables access to a site before it is accessible globally
Jon L provides an update on the NCSC's guidance on the 'WannaCry' ransomware.
North Korea stole millions of dollars in crypto assets in at least one major hack
ExtraHop study finds sensitive protocols are not being managed securely
In this advisory we are disclosing a vulnerability in the Huawei log device that allows any unprivileged process to learn the value of randomized kernel pointers. The vulnerability can be used to defeat KASLR mitigation.
Huawei kernels are shipped with custom log devices (/dev/hwlog_dubai, /dev/hwlo...
Think tank claims British consumers suffer the highest losses
Inauthentic internet assets used to improve China’s image abroad
In this advisory we are disclosing a vulnerability in the Huawei log device that allows any unprivileged process to disclose sensitive information from the kernel.
Huawei kernels are shipped with custom log devices (/dev/hwlog_dubai, /dev/hwlog_exception and /dev/hwlog_jank) that facilitate better s...
The TA likely used RAR and 7zip to archive files and folders from multiple directories
The standard is designed to provide buyers of application security assessment services with high levels of assurance