> TODAY'S SUMMARY (1 articles)
Cybersecurity threats are evolving beyond traditional attack surfaces, with attackers increasingly targeting hardware and supply chain vulnerabilities. Recent incidents highlight a shift towards exploiting IoT devices and cloud infrastructure, emphasizing the need for robust security measures in these areas. Moreover, ransomware attacks continue to rise, with cybercriminals employing more sophisticated tactics to extort organizations. Phishing remains a prevalent threat, often serving as the initial vector for larger attacks. Organizations are urged to enhance their security posture by adopting comprehensive risk management strategies and prioritizing employee training to mitigate these emerging threats.
|
// AI-powered summary generated at 08:00
By modifying the route53 entries and utilizing the acm-pca private CA one can hijack the calls to AWS API inside the AWS VPC
One area that I have encountered quite often over the years is that during recon phase of a bug bounty hunt or pentest a set of AWS access keys are being discovered.
Let’s say you found 50 AWS access keys by drooling and hunting through public Github repos and using other nifty tricks and means.
How...
Cybersecurity firm joins growing list of companies pulling out of Russia following invasion of Ukraine
BNP Paribas rescinds access privileges for its Russia-based workers over cyber-attack fears
This white paper explains how basic security controls can protect organisations from the most common cyber attacks.
US to try former Canadian government employee accused of ransomware attacks
Anonymous revealed it has leaked files from the agency responsible for the supervision of communications, information technology and mass media
This summer at Black Hat, we have published research about exploiting Huawei basebands (video recording also available here). The remote code execution attack surface explored in that work was the Radio Resource stack’s CSN.1 decoder. Searching for bugs in CSN.1 decoding turned out to be very fruitf...
The new rules are designed to improve trust in digital identity solutions
Cybersecurity must be about growing trust in technologies rather than surveillance and control, argues Prof Adam Joinson
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
DDoS tools may be booby-trapped, warns Cisco
Move is aimed at driving accountability and transparency
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
Lapsus group appears to have compromised new targets
Grand jury indicts two women on suspicion of tampering with election equipment
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
Old botnet performs new trick by inserting itself into the middle of email threads
Defendant indicted over deployment of REvil ransomware arrives in America
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...