Consumer group points to vulnerable subdomains and insecure authentication
Le Cyber Campus Bodensee (MCB) a subi un cyberattaque le 13 janvier 2022, entraînant des perturbations massives dans le fonctionnement de la clinique. Les autorités ont finalement fait un avancement dans l'enquête en 2023, menant à la démantèlement du groupe pirate "Hive", présumé responsable de l'a...
Nearly 135K individuals impacted by cyber-attack on Medical Review Institute of America
German hacker says he has full remote control of more than 25 Tesla cars in 13 countries
One of your developers finds a bug in your codebase—an unhandled error code—and wonders whether there could be more. He combs through the code and finds unhandled error after unhandled error. One lone developer playing whack-a-mole. It’s not enough. And your undisciplined team of first-year Stanford...
Electronic Arts confirms high-profile player accounts are being targeted by cyber-criminals
The drill is designed to test member states’ preparedness for an attack affecting the continent’s distribution networks
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in December:
Articles
Access Point cannot connect to WatchGuard Cloud or does not appear in your WatchGuard Cloud account
AuthPoint User Activity report does not show dat...
The AI Standard Hub is designed to improve AI governance as use of these technologies surge
Nottingham cyber-voyeur deployed crypters to bypass AV tools
This past winter, I was fortunate to have the opportunity to work for Trail of Bits as a graduate student intern under the supervision of Peter Goodman and Artem Dinaburg. During my internship, I developed Dr. Disassembler, a Datalog-driven framework for transparent and mutable binary disassembly. T...
Plenty for organizations to work on as they continue fixing Log4j
EU’s privacy tsar says many innocent people have been swept up in dragnet
The last weeks of 2021 got quite interesting for security professionals and software engineers.
Apache’s log4j library and its now prominent Java Naming and Directory Interface support, which enables easy remote code execution, made the news across the industry.
What makes Log4Shell scary is the wid...
Claroty completes acquisition of New York-based healthcare IOT security company
More than 12K patients impacted by email hacking incident at Ciox Health
At Trail of Bits, we pride ourselves on making our best tools open source, such as algo, manticore, and graphtage. But while this post is about open source, it’s not about our tools… In 2021, Trail of Bits employees submitted over 190 pull requests (PRs) that were merged into non-Trail of Bits repos...
FBI, CISA and NSA warn Russian cyber-criminals are targeting America's critical infrastructure
Cybersecurity failures were identified as a significant and growing global problem by respondents
Leverage a default configuration in Terraform Enterprise to steal credentials from the Metadata Service