> TODAY'S SUMMARY (1 articles)
Cybersecurity threats are evolving beyond traditional attack surfaces, with attackers increasingly targeting hardware and supply chain vulnerabilities. Recent incidents highlight a shift towards exploiting IoT devices and cloud infrastructure, emphasizing the need for robust security measures in these areas. Moreover, ransomware attacks continue to rise, with cybercriminals employing more sophisticated tactics to extort organizations. Phishing remains a prevalent threat, often serving as the initial vector for larger attacks. Organizations are urged to enhance their security posture by adopting comprehensive risk management strategies and prioritizing employee training to mitigate these emerging threats.
|
// AI-powered summary generated at 08:00
The Emotet botnet continues to evolve and now includes a credit card stealer module
West Sussex man blackmailed his victims
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in June and July (note that previously published June Knowledge Base digest was incomplete):
Articles
Why do I see a "failed to connect B channel" Firebox log message?
Ho...
Malware and botnet detections also soar
August Patch Tuesday addresses over 120 vulnerabilities
Début août 2022, une attaque sophistiquée a visé les systèmes de l'organisation allemande IHK, incitant son fournisseur de services, IHK-GfI, à déconnecter ses 79 chambres de commerce de l'internet pour limiter les dégâts. Des experts du BSI et de la ZAC NRW soupçonnent des motivations d'espionnage...
Some of these packages were capable of stealing user credentials and environment variables
Tornado Cash would have been used to launder more than $7b in virtual currency since its foundation
L'attaque a conduit à l'arrêt de tous les équipements informatiques et au redémarrage sur une nouvelle infrastructure IT. Tous les départements de l'entreprise ont été affectés et la société a eu recours à l'activité partielle afin de compenser.
The report extends CISA's “first seen” date and the geolocation of the target to other countries
Former NHS employee ordered to pay victims compensation
You think you’ve found a critical bug in a Solidity smart contract that, if exploited, could drain a widely used cryptocurrency exchange’s funds. To confirm that it’s really a bug, you need to figure out the value at an obscure storage slot that has no getter method. Adrenaline courses […]
Firm tight-lipped on how many customers are affected
Even those with policies may see coverage greatly reduced
Jon L provides an update on the NCSC's guidance on the 'WannaCry' ransomware.
The groups' attacks were reportedly relatively low in sophistication but persistent and well-resourced
The phishing emails contained Microsoft Word documents that exploited the CVE-2017-11882 flaw
In this advisory we are disclosing a vulnerability in the Huawei log device that allows any unprivileged process to learn the value of randomized kernel pointers. The vulnerability can be used to defeat KASLR mitigation.
Huawei kernels are shipped with custom log devices (/dev/hwlog_dubai, /dev/hwlo...
LogoKit is based on JavaScript and can change logos and text on landing pages in real-time
New social engineering campaign leverages Coinbase