> TODAY'S SUMMARY (1 articles)
Cybersecurity threats are evolving beyond traditional attack surfaces, with attackers increasingly targeting hardware and supply chain vulnerabilities. Recent incidents highlight a shift towards exploiting IoT devices and cloud infrastructure, emphasizing the need for robust security measures in these areas. Moreover, ransomware attacks continue to rise, with cybercriminals employing more sophisticated tactics to extort organizations. Phishing remains a prevalent threat, often serving as the initial vector for larger attacks. Organizations are urged to enhance their security posture by adopting comprehensive risk management strategies and prioritizing employee training to mitigate these emerging threats.
|
// AI-powered summary generated at 08:00
City council approves $10m appropriation toward Dakota State University cybersecurity lab
Ireland’s data regulator imposes penalty after inquiry into 2018 data breach notifications
By modifying the route53 entries and utilizing the acm-pca private CA one can hijack the calls to AWS API inside the AWS VPC
UK government finds NortonLifeLock purchase of Avast could reduce competition
Check Point study urges developers to follow best practices
One area that I have encountered quite often over the years is that during recon phase of a bug bounty hunt or pentest a set of AWS access keys are being discovered.
Let’s say you found 50 AWS access keys by drooling and hunting through public Github repos and using other nifty tricks and means.
How...
Alert explains how misconfigured authentication allowed hackers in
German authorities had urged firms to replace the Russian vendor’s products
This white paper explains how basic security controls can protect organisations from the most common cyber attacks.
WikiLeaks founder’s appeal against extradition to US refused by UK Supreme Court
Cyber-attack on German subsidiary of Russian state-backed energy company
This summer at Black Hat, we have published research about exploiting Huawei basebands (video recording also available here). The remote code execution attack surface explored in that work was the Radio Resource stack’s CSN.1 decoder. Searching for bugs in CSN.1 decoding turned out to be very fruitf...
PHI of 287K patients at risk after cyber-attack on South Denver Cardiology Associates
The widescale DDoS attack is suspected to have been conducted by a nation-state actor
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
Zimperium report warns of bugs, malware and misconfigurations
CaddyWiper looks like nothing else, says ESET
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
Facial recognition company lists multiple ways tech could be used by Kyiv
Alleged DDoS attacker arrested at home while apparently 3D printing a gun