> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Seven in 10 inquiries on dark web forums relate to gaining access to a web resource
Thompson becomes independent director of endpoint management and security provider
The other day I read this blog post about “The Death of Manual Red Teams” and I thought I’d take a moment to comment on it to provide an alternative perspective.
In my opinion the premise of the blog post is backwards, highlighting a lack of understanding of what red teaming is about.
For instance t...
UK Cyber Security Council brings profession in line with medical, legal sectors
Video game firm CD Projekt reveals a ransom note left by the attackers
With access to an EC2 instance you can intercept, modify, and spoof SSM communications.
SMBs are being bombarded by unsolicited bug bounty requests
Unknown assailant hijacked system to increase sodium hydroxide levels
If you’re thinking of writing a paper describing an exciting novel approach to smart contract analysis and want to know what reviewers will be looking for, you’ve come to the right place. Deadlines for many big conferences (ISSTA tool papers, ASE, FSE, etc.) are approaching, as is our own Workshop o...
Iowan pleads guilty to accessing sensitive, non-public information and releasing it on Facebook
PHI of more than 36k UPMC patients may have been exposed following attack on law firm
The Kindle (ebook) edition of “Cybersecurity Attacks - Red Team Strategies” is currently free on Amazon.
Grab your copy while it lasts and spread the word!
Configuration error allows unauthorized third party to access anti-malware solution maker’s technical logs
RDP attacks continued to grow in Q4 of 2020, but at a slower rate
Keep your access by chaining assume-role calls.
NHS Digital figures highlight email threats faced by the healthcare sector
Operation Secreto results in 105 arrests across the continent
Maintain access to an EC2 instance and it's IAM role via user data scripts.
Ransomware group suspected, but lack of malware perplexes
Virgil Sigma and VQR investors left high and dry