> TODAY'S SUMMARY (13 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.
|
// AI-powered summary generated at 16:00
Pioneer Kitten group looks to make some money on the side
Agari stats reveal continued risk from email scammers
Graphtage is a command line utility and underlying library for semantically comparing and merging tree-like structures such as JSON, JSON5, XML, HTML, YAML, and TOML files. Its name is a portmanteau of “graph” and “graftage” (i.e., the horticultural practice of joining two trees together so they gro...
CenturyLink blamed for downing internet services on Sunday, disrupting Chess Olympiad
Phony Android notifications affect Google and Microsoft users
Excited to announce that I will be presenting at BSides Singapore this year.
The topic is adversarial usage of virtual machines during lateral movement. And we will also cover threat hunting and detection ideas.
I have been referring to this technique as the Shadowbunny over the years. :)
The confer...
Cybersecurity firm Signal Sciences to be acquired by Fastly for $775m
Jakarta’s government says cyber-attacks on critics could be third-party attempt to sow discord
Today I’m gonna talk about a class of application security issues I ran across a few times over the years. In particular, let’s discuss race conditions when it comes to files with sensitive content and permissions.
Race conditions can allow an adversary to gain access to sensitive information on mac...
US goes after 280 cryptocurrency accounts allegedly tied to exchange hacks
Democrats seek to silence staffers who might share detrimental info via dating apps
During an assessment you may find AWS IAM credentials. Use these tactics to identify the principal of the keys.
Nearly half of people are comfortable sharing streaming services with housemates
Ironscales research finds 50,000+ fake login pages so far in 2020
In this post, we’ll show you how to test your smart contracts with the Echidna fuzzer. In particular, you’ll see how to: Find a bug we discovered during the Set Protocol audit using a variation of differential fuzzing, and Specify and check useful properties for your own smart contract libraries. An...
Data shows cybercrime costs organizations around $24.70 every minute, as RiskIQ determines the COVID-19 impact
Retail giant will team up with Microsoft
The Ultimate OSCP Preparation Guide [DEPRECATED] Update Notes This guide is now deprecated due to exam revisions made by Offensive Security on January 11, 2022.
I published this guide on August 17th, of 2020. Offensive Security no longer requires the buffer overflow, and to pass this exam, you’ll ha...
Employee at car giant allegedly offered $1m to help deploy malware
Multiple DDoS attacks reportedly too much for one of dark web’s most popular sites