> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
Houston resident convicted of scamming Teton School District out of $785,000
New figures show that over half of smishing texts so far in Q4 2021 impersonated parcel and package delivery firms
Trail of Bits is publicly disclosing two bugs that affect Shamir’s Secret Sharing implementation of Binance’s threshold signature scheme library (tss-lib) and most of its active forks. Here is the full list of affected repositories: Binance’s tss-lib Clover Network’s threshold-crypto Keep Network’s...
Chinese tech giant was first to discover and report the bug
Tool will help security teams root out unpatched instances
How to start the journey to zero trust architecture once you have decided it meets your business requirements.
Lawyers are seeking compensation from Police Federation
Belgian defense ministry confirms cyber-attack involving exploitation of Log4j software
How organisations can address the growing trend in which multiple vulnerabilities within a single product are exploited over a short period.
Metropolitan police investigating suspected fake COVID-19 vaccination records arrest NHS employees
Cyber-thieves steal from West Virginia-based healthcare provider by impersonating vendor
On August 18, 2021, samczsun reported a critical vulnerability in SushiSwap’s MISO smart contracts, which put ~350 million USD (109 thousand ETH) at risk. This issue is similar to an attack that was conducted on the Opyn codebase in August of 2020. At the time of the report, I was finishing my […]
The quartet is said to have made tens of millions after hacking SEC filing firms
IT misconfiguration enabled attackers to access network
You just cloned a fresh source code repository and want to get a quick sense of its dependencies. Our tool, it-depends, can get you there. We are proud to announce the release of it-depends, an open-source tool for automatic enumeration of dependencies. You simply point it to a source code repositor...
The $150m embezzled from a Sony subsidiary was converted into bitcoin
Russian who conspired to launder money stolen from cybercrime victims gets time served
Version française: 🇫🇷 In January 2021, ANSSI was informed of a large campaign of attacks against French entities linked to the APT31 intrusion set. The investigations carried out by ANSSI led to the analysis of the intrusion set’s entire chain of infection. In turn, the knowledge acquired was...
Canadian financial company endeavors to settle class-action suit over long-running data breach
2021 on track to become the worst year for health sector data breaches in US history