Flagstar reveals details of December incident
Forescout warns of widespread “insecure-by-design” practices
Trail of Bits has launched a podcast. The first five-episode season is now available for download. The podcast and its RSS feed are available at trailofbits.audio, and you may subscribe on all major podcast outlets, including Apple iTunes, Spotify, Gaana, Google Podcasts, Amazon Music, and many othe...
New website can check for installed Chrome extensions and generate a fingerprint of a visiting user
The software engineer mined stolen data and installed cryptocurrency miners on some AWS servers
Recently we have disclosed new advisories related to the remote exploitation of Huawei smartphones.
The research that led to these findings was motivated by analyzing new interfaces for remote code execution on a mobile platform. After our work on exploiting Huawei’s Kirin via its baseband interface...
BRATA now targeting a specific financial institution at a time
Cyber now seen as most important component for adoption
La Bauer Gruppe et la Mürwiker Gruppe, deux entreprises allemandes, ont été sévèrement touchées par des cyberattaques qui ont crypté leurs serveurs et données, les laissant sans accès à leurs systèmes informatiques essentiels. Les attaques ont entraîné des coûts de restauration estimés à environ 2,3...
Taiwanese manufacturer braced for twin threat
Russian cyber-criminals rented it out to other groups
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in May:
Articles
Supervised iOS Devices: Back up and Restore without Losing Data
Video or voice calls disconnected while on wireless network
Known Issues
AuthPoint Logo...
Host devices might lose connection to the internet after client device connects
Hao Kuo Chi illegally obtained iCloud credentials of 4700 victims
After two long years of lockdowns, virtual meetups, quarantines, and general chaos, the Python community gathered en masse to Salt Lake City for PyCon 2022. Two of our engineers attended the conference, and we are happy to report that the Python community is not only alive and well but also thriving...
The code injection vulnerability allowed attackers to call methods in various Ninja Forms classes
The complex interrelation between trust, privacy and cybersecurity was discussed by experts during Okta Forum 2022
On June 7, 2022, Lincoln Investment became aware of unusual activity in a cloud-based sharefile account used by a financial professional. In response, Lincoln Investment immediately secured the sharefile account, and began working with third-party specialists to investigate the nature and scope of t...
Proposals designed to unlock businesses' ability to use data and clamp down on nuisance calls and cookie pop-ups
Most dangerous are spyware tools capable of stealing information from other apps' notifications