> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
Bernalillo County is investigating a suspected ransomware attack
Cerberus Cyber Sentinel Corporation purchases American cybersecurity operations and compliance company
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in December:
Articles
Access Point cannot connect to WatchGuard Cloud or does not appear in your WatchGuard Cloud account
AuthPoint User Activity report does not show dat...
Agribusiness worker stole intellectual property from employer and tried to sell it to China
Security business closes following legal dispute and error-strewn report
This past winter, I was fortunate to have the opportunity to work for Trail of Bits as a graduate student intern under the supervision of Peter Goodman and Artem Dinaburg. During my internship, I developed Dr. Disassembler, a Datalog-driven framework for transparent and mutable binary disassembly. T...
Finalsite said the attack occurred on Tuesday
RCE bug found in popular H2 database console
The last weeks of 2021 got quite interesting for security professionals and software engineers.
Apache’s log4j library and its now prominent Java Naming and Directory Interface support, which enables easy remote code execution, made the news across the industry.
What makes Log4Shell scary is the wid...
Parents accidentally receive test results belonging to other people’s children
PHI of nearly 80,000 current and former FCI patients impacted by cyber-attack
At Trail of Bits, we pride ourselves on making our best tools open source, such as algo, manticore, and graphtage. But while this post is about open source, it’s not about our tools… In 2021, Trail of Bits employees submitted over 190 pull requests (PRs) that were merged into non-Trail of Bits repos...
Rhode Island attorney general to probe data breach of the Ocean State’s public transit authority
The figures highlight how digital currencies are increasingly being used by criminals
Leverage a default configuration in Terraform Enterprise to steal credentials from the Metadata Service
Plotters defrauded at least 70 victims over eight-year period
Arbix Finance developers make off with funds
Trail of Bits is publicly disclosing two bugs that affect Shamir’s Secret Sharing implementation of Binance’s threshold signature scheme library (tss-lib) and most of its active forks. Here is the full list of affected repositories: Binance’s tss-lib Clover Network’s threshold-crypto Keep Network’s...
New York attorney general notifies 17 big-name firms
American hospitality chain tells employees their personal data may have been exposed