> TODAY'S SUMMARY (4 articles)
In recent cybersecurity news, a significant data breach at La Poste subsidiary Maileva has affected 22 million individuals in France, exposing sensitive personal information. Additionally, a secret stealer malware targeting GitHub repositories was reported, highlighting the ongoing risks in software development environments. The compromise of the Claude Code extension was linked to a stolen access key from the Fireworks AI platform, illustrating the dangers of credential exposure. Overall, attackers are shifting focus beyond traditional vulnerabilities, increasingly targeting user credentials and access keys to exploit software and services. This trend emphasizes the need for enhanced security measures and awareness in both corporate and individual contexts.
|
// AI-powered summary generated at 12:00
Cybersecurity research and advisory firm to open new global headquarters in New York City
More than 40% of SOC staff said lack of leadership or executive level support was a major barrier to success
There is a memory management and a path traversal vulnerability in the vision DSP kernel driver of Exynos S20 devices. These vulnerabilities can be leveraged by a malicious untrusted application to permanently disable the device until it is factory reset.
Vulnerability Details The Exynos DSP driver...
Vulnerability could remain stubbornly difficult to find and patch
UKG suffered attack impacting its Kronos Private Cloud last week
There is a sensitive information disclosure vulnerability in the vision DSP kernel driver of S20 Exynos devices. The vulnerability can be used by malicious privileged applications to read the kernel’s and other application’s memory.
Vulnerability Details The Exynos DSP driver implements an ioctl cal...
Individual targeted IT company for sensitive client data
There is a kernel virtual memory mapped IO buffer overflow vulnerability in the vision DSP kernel driver of S20 Exynos devices. The vulnerability could potentially be used by a malicious system application to compromise the kernel and gain further privileges.
The vulnerability is only triggerable vi...
There is a vmalloc out of bounds write vulnerability in the vision DSP kernel driver of Samsung Exynos S20 devices. The vulnerability could potentially be used by a malicious system application to compromise the kernel and gain further privileges.
Vulnerability Details The Exynos DSP driver implemen...
Late last week security researchers disclosed a critical, unauthenticated remote code execution (RCE) vulnerability in log4j2, a popular and widely used logging library for Java applications. CVE-2021-44228 scores the maximum 10.0 on the Common Vulnerability Scoring System (CVSS) due to a combinatio...
Cops called after IT department discovers files with “names that alarmed them”
Cybersecurity training institute invites world to help Santa defeat cyber-villains
There is an ION memory buffer type confusion vulnerability in the Exynos ION kernel driver. The vulnerability can cause zero initialised memory to be treated as a valid pointer and cause a kernel NULL pointer exception. Untrusted applications can abuse this bug to cause a kernel crash and carry out...
Prime Minister Modi’s Twitter account hacked to spread fake Bitcoin message
Joshua Bellamy falsified information about his company
There are a series of memory corruption vulnerabilities in Samsung Exynos kernels, due to improper error checks, after dma_buf_vmap calls. These bugs can be abused by various privileged processes to cause NULL pointer accesses and crash the kernel.
Vulnerability Details The kernel uses the dma_buf_v...
Birmingham man forced some victims to the point of suicide
Log4j vulnerability affects huge sweep of applications and vendors
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in November:
Articles
About Wi-Fi in WatchGuard Cloud
About Wi-Fi in WatchGuard Cloud access point licenses
How do I find my partner account ID?
How to add Datto access p...
German logistics firm unable to rule out data leakages or unauthorized use of data