Group exploited Log4Shell “within hours,” says Mandiant
None were reported as being exploited in the wild
English version : 🇬🇧 Dans ce panorama de la menace informatique, l’ANSSI revient sur les grandes tendances ayant marqué le paysage cyber sur l’année 2020-2021 et en propose des perspectives d’évolution à court terme. Ces tendances s’inscrivent dans une hausse continue du niveau de menace. Ainsi,...
US locks up COVID Relief fraudster who spent thousands on collectible trading card
Patient and employee data in care of Duncan Regional Hospital exposed in security incident
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in February and early March:
Articles
Wireless client MAC address randomization and reporting in Wi-Fi in WatchGuard Cloud
Support automated phone system partner verifica...
Google announces intent to buy cybersecurity firm for approximately $5.4bn
Embracing change and collaboration are key to government-backed DSbD initiative, which aims to transform UK's approach to cybersecurity
An AWS/GitLab CICD themed CTF.
Crypto firms say digital currency unlikely to be used to evade sanctions
FBI reveals concerning new details of RagnarLocker campaigns
During my winternship, I applied code analysis tools, such as GHC’s Haskell profiler, to improve the efficiency of the Echidna smart contract fuzzer. As a result, Echidna is now over six times faster! Echidna overview To use Echidna, users provide smart contracts and a list of conditions that should...
New discovery could give attackers full control over a targeted system
Access blocked to 7000 publications after strike on world’s largest digital newspaper distributor
Avertissement : Le rythme des opérations militaires en Ukraine, ainsi que les réactions internationales, entraînent des évolutions très rapides de la situation. En outre, de nombreuses informations circulant en ligne sont invérifiées. Les éléments présentés ne doivent pas être considérés comme...
Kurbo and WW International pay $1.5m penalty over alleged violations of children’s privacy laws
Tech company confirms source codes for Galaxy devices among data snatched in cyber-attack
Although Gitlab is not as popular as Github, it’s common to run across it these days. Especially after Microsoft acquired Github it seemed more individuals and organizations flocked over to Gitlab.
In this post I want to document a couple of recon commands that are useful post-exploitation, and for...
Satellite comms system is helping Ukraine stay online
Europol report warns of risk to economy and citizens’ health