Ransomware impacted certain internal systems
North Korean IT workers are attempting to generate revenue for DPRK and conduct cyber intrusions
Rellic is a framework for analyzing and decompiling LLVM modules into C code, implementing the concepts described in the original paper presenting the Dream decompiler and its successor, Dream++. It recently made an appearance on this blog when I presented rellic-headergen, a tool for extracting deb...
The 100K in the UK scheme is aimed at recent graduates and career changers seeking to work in cyber
Attacks surge 12% in 2021, according to leading insurer
How to work with stolen IAM credentials and things to consider.
Venezuelan linked to Jigsaw and Thanos variants
Range of initiatives will push back against Russia and China
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in April:
Known Issues
10G SFP+ interfaces (eth8/eth9) on Firebox M590/M690 do not respond to traffic
After upgrade to Fireware 12.8, IKEv2 BOVPNs that use VPN failover a...
The company announced that employees’ personally identifiable information was exposed in the breach
Microsoft advised organizations running Windows or Linux on internet-facing systems to take action
Last week, over 500 cryptographers from around the world gathered in Amsterdam for Real World Crypto 2022, meeting in person for the first time in over two years. As in previous years, we dispatched a handful of our researchers and engineers to attend the conference, listen to talks, and schmooze ob...
Radcliffe will be officially inducted into the Hall of Fame during a keynote session at this year’s Infosecurity Europe 2022
Hacker group known as “Killnet” blamed for disruption
FIN7 est un groupe cybercriminel russophone initialement spécialisé dans les attaques à visée lucrative à l’encontre de systèmes d’information bancaires. Il a ciblé des secteurs variés aux États-Unis, au Royaume-Uni, en Australie et en France. À partir de 2020, le groupe fait évoluer son activité...
More testing and more collaboration on the way
Rapid7 complains of vendor’s silent patching process
During my winternship, I used the findings from recent Go audits to make several improvements to go-fuzz, a coverage-based fuzzer for projects written in Go. I focused on three enhancements to improve the effectiveness of Go fuzzing campaigns and provide a better experience for users. I contributed...
The rules will apply to medium and large organizations operating in critical sectors like healthcare and water management
A panel of cyber leaders discuss Ukraine's cyber-resilience and other trends during the conflict