[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> 🇫🇷/🇬🇧 [Maj] Campagne d'attaque du mode opératoire APT31 ciblant la France (21 juillet 2021)
🇫🇷 L’ANSSI traite actuellement une vaste campagne de compromission touchant de nombreuses entités françaises. Cette dernière, toujours en cours et particulièrement virulente, est conduite par le mode opératoire APT31 (voir CERTFR-2021-CTI-012 pour plus d'informations). Les investigations montrent...
> 🇫🇷/🇬🇧 [Maj] Campagne d'attaque du mode opératoire APT31 ciblant la France (21 juillet 2021)
🇫🇷 L’ANSSI traite actuellement une vaste campagne de compromission touchant de nombreuses entités françaises. Cette dernière, toujours en cours et particulièrement virulente, est conduite par le mode opératoire APT31 (voir CERTFR-2021-CTI-012 pour plus d'informations). Les investigations montrent...
> Get IAM Credentials from a Console Session
Convert access to the AWS Console into IAM credentials.
> Trump Sues Facebook, Google and Twitter
Former US president takes legal action against companies over alleged illegal censorship
> Marvel Movie Malware Detected
Black Widow malware masquerades as new movie to steal money and credentials
> Knowledge Base Digest - June 2021
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in June: Articles False positive security scans for jQuery vulnerabilities in Dimension 2.2 Find Dimension Operating System version How to manually reset TDR Host Sensor...
> Multi-Cloud Environments More Risky
Security professionals say multi-cloud environments pose greater security challenges
> CTOs Keeping Quiet on Breaches to Avoid Cyber Blame Game
Report finds 92% of UK organizations suffered a successful attack last year
> CVE-2021-24495: Improper Neutralization of Input During Web Page Generation on ‘id’ parameter in Wordpress Marmoset Viewer Plugin versions 1.9.3 ≤ leads to Reflected Cross Site Scripting
Credits John Github: https://github.com/johnjhacking Jackson Henry [Helped simplify the payload] Twitter: https://twitter.com/JacksonHHax Wabaf3t [Provided post-code analysis/looked for escalation] Twitter: https://twitter.com/wabafet1 Kelly Kaoudis [Reviewed the writeup] Twitter: https://twitter.co...
> Cybercrime Costs Organizations Nearly $1.79 Million Per Minute
648 cyber-attacks per minute occurred in the past year, costing organizations $1.79 million every minute
> Regulator Probes Former Health Secretary's Use of Private Email
Matt Hancock comes under investigation by the ICO
> Automating Microsoft Office to Achieve Red Teaming Objectives
Many Windows applications and services are implemented using an automation infrastructure called Component Object Model (COM). COM has been around for decades and its useful for programming, sharing of code at binary level, usage from scripting languages, and well, red teaming. Wide Usage of Compone...
> New PrintNightmare Patch Can Be Bypassed, Say Researchers
Point and Print function appears to be the problem
> US Could Appeal Assange Extradition Refusal
UK court grants United States permission to appeal decision not to extradite WikiLeaks founder Julian Assange
> Airtag hacks - scanning via browser, removing speaker and data exfiltration
Until the Apple Airtag came out a few months ago I hadn’t really looked into the tag tracking market. Turns out there were already quite a lot of offerings available before Apple joined the market, most notably Tile. However, I wanted to try out the Airtag and ended up ordering a few. This post will...
> Biden Administration Cancels $10bn JEDI Contract
Joint Enterprise Defense Infrastructure cloud contract axed, replaced with multi-vendor contract
> Most Insider Data Breaches Aren't Malicious
New research finds 78% of reported breaches that involve an insider were not malicious
> Over 170 Scam Cryptomining Apps Charge for Non-Existent Services
Lookout claims users have lost over $350,000 to mobile fraud
> Kremlin Hackers Reportedly Breached Republican National Committee
Attempted holiday weekend raid came via third-party provider
> US: We May Take Unilateral Action Against Russian Cyber-Criminals
White House says option remains if Kremlin doesn’t act