[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Offensive BPF! Getting started.
Over the last few years eBPF has gained a lot of traction in the Linux community and beyond. eBPF’s offensive usage is also slowly getting more attention. So, I decided to dive into the topic from a red teaming point of view to learn about it to raise awareness and share the journey. Similar to the...
> Introducing Our New Status Page
Today we’re pleased to announce the new WatchGuard Technologies status page. People across the globe trust WatchGuard’s products and services to keep their users, devices, and networks secure. We understand it can be frustrating when things aren’t working as expected and you don’t have any insights...
> Canadian Vaccine Passport App Exposes Data
Personal information of hundreds of thousands of PORTpass users allegedly viewable in plain text
> US Mulls Cyber-attack Reporting Mandate
Critical infrastructure companies may be required to report cyber-attacks to federal government
> Cyber indus. : FIC vs GI
Deux salons majeurs viennent d’avoir lieu en France : le Forum International de la Cybersécurité (Lille) et le salon Global Industrie (Lyon).   Le sujet de la cybersécurité industrielle est à l’intersection des [...] Lire la suite
> YouTube Pledges to Block all Anti-Vaccine Content
The video-sharing site outlined its updated medical misinformation policy in a blog post published earlier today
> Mental Healthcare Providers Report Data Breaches
Seattle’s Samaritan Center and Philadelphia’s Horizon House warn PHI may have been exposed
> The Ultimate Guide to Crashing Your Friend's Wedding - The Knot, Business Logic Flaw
Credits John Github: https://github.com/johnjhacking Robert Willis: Twitter: https://twitter.com/rej_ex Identification The Wedding websites that can be created with The Knot have many components built in. Among some of the functions included the ability to send out RSVP invites to friends or family....
> More Than Two-Thirds of Organizations Are Targets of at Least One Ransomware Attack
85% are more concerned about a ransomware attack than other cyber-threats, according to Fortinet survey
> ICO Reveals 60% Rise in Nuisance Contact Reports
The UK's ICO received an average of 13,925 reports of nuisance calls, texts and emails per month in the first half 2021
> CVE-2021-40875: Improper Access Control in Gurock TestRail versions ≤ 7.2.0.3014 results in sensitive file exposure
Credits John Github: https://github.com/johnjhacking SickCodes Twitter: https://twitter.com/sickcodes Identification During research, I stumbled upon a TestRail application. While using Burp Suite to look at various requests and responses of the application, I noticed a files.md5 path: It seemed fai...
> CISA and NSA Deliver New Security Guidance for VPNs
Best practice advice will help to reduce corporate attack surface
> Most Third-Party Cloud Containers Have Vulnerabilities
Researchers claim misconfigurations are also rife in cloud infrastructure
> Kernel Vmalloc Use-After-Free in the ION Allocator
Summary In this advisory we are disclosing a vmap/vmalloc use-after-free vulnerability within the Android ION allocator, that impacts most Android devices that utilize ION. The exploitability of the vulnerability depends on how the various kernel drivers use the allocated ION buffers, the version of...
> SolarWinds Attackers Develop New FoggyWeb Backdoor
Malware steals info from Active Directory Federation Services servers
> Cyber-attack Floors British Payroll Firm
Giant Group initiates total system shutdown after “sophisticated” attack
> Lambda Persistence
How to establish persistence on a Lambda function after getting remote code execution.
> US Deports Convicted Cyber-criminal to Russia
Operator of illegal online marketplaces who sold stolen card credentials is returned to native country
> Nebraska County Attorney Indicted for Cyber-stalking
One alleged victim was so traumatized by the abuse that he was committed to a psychiatric ward
> Upcoming WGID Maintenance
WatchGuard is working on some important maintenance to our services. On 17 September 2021, starting at 11:30pm UTC WatchGuard will be performing maintenance that may cause service interruptions, as well as some small changes to the product. The duration of this maintenance is expected to last from...