> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several significant threats and trends. A major cyberattack on French bank Crédit Mutuel Arkéa resulted in fraudulent transactions totaling $133 million, emphasizing the risks associated with third-party service providers. Scammers are increasingly impersonating trusted brands in fake gift card schemes, collecting personal information from unsuspecting consumers. The rise of IoT vulnerabilities is underscored by recent hacks affecting critical infrastructure, such as blood labs and grocery stores. Additionally, vulnerabilities in SonicWall's SonicOS have been exploited, prompting CISA to add these to its Known Exploited Vulnerabilities catalog. Developers are also reminded of security best practices, as sensitive credentials were found exposed in public GitHub repositories.
|
// AI-powered summary generated at 20:00
Sensitive medical images including X-rays and CT scans are readily available
Government agencies issue advice after apparent nation state attacks
Zero-knowledge proofs, once a theoretical curiosity, have recently seen widespread deployment in blockchain systems such as Zcash and Monero. However, most blockchain applications of ZK proofs make proof size and performance tradeoffs that are a poor fit for other use-cases. In particular, these pro...
Microsoft outlines the changing tactics being employed
Breach went undetected for seven months
Today FireEye shared that they were victim of a cyberattack and internal red teaming tooling was accessed by adversaries. More details in this NYT article.
This reminded me that I wanted to do a post on actively protecting pen testers and pen testing assets for a while.
Against persistent adversarie...
UK’s Online Safety Bill set to cause controversy
Company also reveals fewer than 18,000 customers affected by nation state attack
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in November:
Articles
Firebox Cloud supports accelerated networking in Azure
Known Issues
IKEv2 profile import fails on macOS Big Sur 11.0.1
DHCPv6 server restarts repe...
Adult website deletes unverified content in an effort to combat child sexual abuse
Arizona man who teamed up with neo-Nazis to threaten and harass journalists is imprisoned
On 1 December 2020, the TDR EU AWS environment suffered from an intermittent outage which resulted in some Host Sensors being unable to contact ThreatSync. This seems to be linked to the deployment of new TDR infrastructure on the night of 30 November 2020. Despite Engineering's extensive efforts, t...
Bill to increase jail time for stalkers who target minors goes to US president for signature
Outpost24 will use the funding to expand its services globally
Report highlights influence of Chinese communist party members in organizations throughout the world
Wall Street veteran Phil Venables spent 20 years at the bank
San Jose man temporarily deleted 16,000 WebEx Teams accounts
US government agencies hit just days after FireEye announced breach
Hacker who sent data on US military and government personnel to Islamic State granted compassionate release
Police investigation concludes Fancy Bear behind August cyber-attack on Norwegian parliament