The Cyber Runway program will aid the growth of cyber startups, small businesses and scaleups
Imperva recorded a surge in bad bot activity on sporting and betting sites during high profile events this summer
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in July:
Articles
Users cannot log in to Outlook with AuthPoint MFA
Configure HTTPS Content Inspection for Exchange Server with Outlook Web Access
AuthPoint does not sync...
Over one-third of organizations worldwide have experienced a ransomware or breach that blocked access to systems or data
Poly Network has received back $260m out of $610m stolen by the hacker, who claims to be ethically motivated
I like using procdump on Windows.
It’s quite handy for software development when systems have memory leaks or performance issues, procdump allows to set thresholds to trigger creation of a core dump.
BUT, it’s also super useful to search processes for secrets and other information.
For instance, thi...
Cyber-attack blamed for data breach at Korean arm of French luxury brand
Boutique NYC cybersecurity company snapped up by technology security firm
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an index into a function pointer array. The user provided values can exceed the boundaries of the legitimate array and might cause user controlled values to be called as function poin...
Cops arrest alleged members of cyber-criminal gang that victimized companies in Asia and Europe
New research finds that more organizations have been targeted by RDDoS attacks than ransomware, with both tactics proving fruitful for cyber-criminals
Summary The NPU device’s kernel driver implements a custom mmap handler that exposes trusted kernel data to user space. These exposed structures contain sensitive data, including kernel pointers, which can be controlled by a user process. The content of these structures is inherently trusted by the...
The global consulting firm has been hit by the LockBit ransomware gang, according to the cyber-criminal group's website
The organization has already received 6.5 million reports
Summary Due to a bug in the way mappings are closed it is possible to free a kmallocated memory chunk arbitrary times. This vulnerability can be used to craft a use after free scenario against any kernel structure that is allocated from the kmalloc-64 cache. There is rich public literature on how su...
10% of all firms surveyed in SmartSearch's report say they carry out no checks on business customers.
Virginia tech-company owner incarcerated over $1.3M fraud schemes and CSAM possession
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an offset to retrieve a kernel structure. Fields of the structure are written with user provided values. A malicious actor can use this vulnerability to overwrite kernel memory with c...
Cyber-criminals drop financial services to hit gaming and travel and leisure industries
Hacker accessed patient data for six months before staging ransomware attack