> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
The payment of ransoms and extortions doubled between 2019 and 2020
Messages from âfriendsâ are fake, says Identity Theft Resource Center
On December 3rd, Aave deployed version 2 of their codebase. While we were not hired to look at the code, we briefly reviewed it the following day. We quickly discovered a vulnerability that affected versions 1 and 2 of the live contracts and reported the issue. Within an hour of sending our analysis...
Avast urges users to uninstall now or risk phishing and data theft
Barracuda Networks reveals latest spear-phishing trends
Zero-knowledge proofs, once a theoretical curiosity, have recently seen widespread deployment in blockchain systems such as Zcash and Monero. However, most blockchain applications of ZK proofs make proof size and performance tradeoffs that are a poor fit for other use-cases. In particular, these pro...
5G security research discloses exploit opportunities
Goontact targets iOS and Android users in Asia who visit sites selling escort services
Today FireEye shared that they were victim of a cyberattack and internal red teaming tooling was accessed by adversaries. More details in this NYT article.
This reminded me that I wanted to do a post on actively protecting pen testers and pen testing assets for a while.
Against persistent adversarie...
Refinitiv boosts cybercrime-fighting abilities with acquisition of Giact Systems
Cyber-attack during governmentâs transition is the most complex to hit Lithuania in years
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in November:
Articles
Firebox Cloud supports accelerated networking in Azure
Known Issues
IKEv2 profile import fails on macOS Big Sur 11.0.1
DHCPv6 server restarts repe...
Cloudhouse acquires UpGuard Core as it looks to expand its offerings and reach
Kevin Curran outlines the ease in which cyber-attacks can be conducted
Malicious updates were responsible for recent Russian attacks
Eight universities named by NCSC as Dundee sees major investment in local cyber-infrastructure
No sharp increase worldwide despite COVID-19 effect
Number of vulnerabilities in US NVD is now 17,447
Husband of researcher who sold hospitalâs secrets to China admits his part in conspiracy
October cyber-attack may have exposed data belonging to 67k patients of Sonoma Valley Hospital