> TODAY'S SUMMARY (1 articles)
Cybersecurity threats are evolving beyond traditional attack surfaces, with attackers increasingly targeting hardware and supply chain vulnerabilities. Recent incidents highlight a shift towards exploiting IoT devices and cloud infrastructure, emphasizing the need for robust security measures in these areas. Moreover, ransomware attacks continue to rise, with cybercriminals employing more sophisticated tactics to extort organizations. Phishing remains a prevalent threat, often serving as the initial vector for larger attacks. Organizations are urged to enhance their security posture by adopting comprehensive risk management strategies and prioritizing employee training to mitigate these emerging threats.
|
// AI-powered summary generated at 08:00
This summer at Black Hat, we have published research about exploiting Huawei basebands (video recording also available here). The remote code execution attack surface explored in that work was the Radio Resource stack’s CSN.1 decoder. Searching for bugs in CSN.1 decoding turned out to be very fruitf...
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
Study finds most consumers prefer to bank online, but are concerned about potential fraud
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
Two-year investigation results in safeguarding of 146 children internationally
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deploy...
Defendant accused of selling stolen credit card data obtained using malware
Ciaran Martin examines the cyber-dimension of the Ukraine-Russia conflict while Leeza Garber offers solutions to the cyber skills crisis
English version : 🇬🇧 Dans ce panorama de la menace informatique, l’ANSSI revient sur les grandes tendances ayant marqué le paysage cyber sur l’année 2020-2021 et en propose des perspectives d’évolution à court terme. Ces tendances s’inscrivent dans une hausse continue du niveau de menace. Ainsi,...
Social media sites and search engines will be forced to prevent fraudulent adverts appearing on their platforms
DSbD initiative aims to put more responsibility in the hands of those who build it, creating a culture of secure by default
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in February and early March:
Articles
Wireless client MAC address randomization and reporting in Wi-Fi in WatchGuard Cloud
Support automated phone system partner verifica...
Law firm says clients have been left in the dark for over six months
Group exploited Log4Shell “within hours,” says Mandiant
An AWS/GitLab CICD themed CTF.
None were reported as being exploited in the wild
US locks up COVID Relief fraudster who spent thousands on collectible trading card
During my winternship, I applied code analysis tools, such as GHC’s Haskell profiler, to improve the efficiency of the Echidna smart contract fuzzer. As a result, Echidna is now over six times faster! Echidna overview To use Echidna, users provide smart contracts and a list of conditions that should...
Patient and employee data in care of Duncan Regional Hospital exposed in security incident