> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
ZLoader could also deliver ransomware, warns Check Point
ICO’s governance model and data protection regime set for overhaul
The last weeks of 2021 got quite interesting for security professionals and software engineers.
Apache’s log4j library and its now prominent Java Naming and Directory Interface support, which enables easy remote code execution, made the news across the industry.
What makes Log4Shell scary is the wid...
US consumer protection agency talks tough
App sharing photos of Muslim women who are “for sale” reported to Indian police
At Trail of Bits, we pride ourselves on making our best tools open source, such as algo, manticore, and graphtage. But while this post is about open source, it’s not about our tools… In 2021, Trail of Bits employees submitted over 190 pull requests (PRs) that were merged into non-Trail of Bits repos...
Israel-based cybersecurity specialist Siemplify bought out by American tech company
Users can learn how to tackle real-world threats at new Wisconsin cybersecurity facility
Leverage a default configuration in Terraform Enterprise to steal credentials from the Metadata Service
Duo stole £10m from UK’s pandemic loan scheme
Senior military official claims “significant” operational impact
Trail of Bits is publicly disclosing two bugs that affect Shamir’s Secret Sharing implementation of Binance’s threshold signature scheme library (tss-lib) and most of its active forks. Here is the full list of affected repositories: Binance’s tss-lib Clover Network’s threshold-crypto Keep Network’s...
Issue led to empty inboxes on first day back at work
Personal data of hundreds of thousands of Albanian citizens leaked on social media
How to start the journey to zero trust architecture once you have decided it meets your business requirements.
Moscow slaps American tech giant with largest ever penalty relating to banned content
Falsifying COVID-19 vaccination card data is now a Class D felony in the state of New York
How organisations can address the growing trend in which multiple vulnerabilities within a single product are exploited over a short period.
Hellmann confirmed that data was extracted from its systems during the ransomware attack earlier this month
US feds accuse Joe Sullivan of using bug bounty to conceal 2016 hack and breach