Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in August and September.
Articles
AuthPoint ADFS agent installation fails on secondary server
AuthPoint Gateway status is Not Installed or Not Connected after upgrade to...
In a joint advisory, three US agencies, NSA, CISA and FBI, warned about Chinese threat actors
The insurance market has detected “unusual activity” and turned off its systems
Earlier this year, I successfully completed my internship at Trail of Bits and secured a full-time position as a Blockchain Security Analyst. This post is not intended to be a technical description of the work I did during my internship. Rather, it is intended to describe my general experience as a...
CEOs put cybersecurity seventh behind near-term risks such as the economy and potential recession
False narratives will try to sow doubt over outcome of election
tl;dr: Our publicly available Semgrep ruleset now has 11 rules dedicated to the misuse of machine learning libraries. Try it out now! Picture this: You’ve spent months curating images, trying out different architectures, downloading pretrained models, messing with Kubernetes, and you’re finally read...
Fake apps led to account takeovers and spam campaigns
Cypro-thieves target popular cross-chain bridging service
La Commission des valeurs mobilières de Hong Kong (SFC) a blâmé et sanctionné Six Fook Securities (ou Luk Fook Securities) pour des lacunes importantes dans ses mesures de cybersécurité. L'incident, une attaque par ransomware survenue en septembre 2022, a causé des perturbations majeures aux infrast...
Threat actors trying to compromise elections are unlikely to result in large-scale disruptions
The original RatMilad spyware hid behind a VPN and phone number spoofing app called Text Me
All about the new look for Hacking The Cloud v2.
Joe Sullivan was charged two years ago with obstruction of justice and misprision
Return to office and improved defenses are having an impact
On a network and need credentials? Try password spraying the domain controller directly.
A few years ago, I wrote this password spray tool called gospray that was used succesfully in a couple of engagements since. It does an LDAP bind directly against the domain controller to validate credentials. T...
Provider runs 140 hospitals across the nation
UK regulator also slams company for predatory marketing calls
Sebastien Vachon-Desjardins, 35, was also ordered to forfeit $21.5m
The document was jointly released by CISA with the FBI and NSA